Hello,

please CC me as I'm not subscribed in to the ports mailing list.

Here's [1] an rc script for nfcapd daemon which is part of the nfdump package.

And while here, document nfexpire in some level in README [2].

Comments?


[1]
<snip>
#!/bin/ksh

daemon="/usr/local/bin/nfcapd -D"
daemon_user="_nfcapd"
daemon_flags="-l /var/cache/nfcapd -P /var/run/nfcapd/nfcapd.pid"

rc_reload=NO

. /etc/rc.d/rc.subr

rc_pre() {
        /usr/bin/install -d -o ${daemon_user} /var/run/nfcapd
}

rc_cmd $1
</snip>

[2]
It should be noted that nfcapd can fill disk rather quickly in vibrant network
environments. Therefore it's important to flush the flow stats every now and
then. One could use the following root's crontab entry to expire flows older
than 31 days:
@daily          /usr/local/bin/nfexpire -t 31d /var/cache/nfcapd 2>&1
> /dev/null

--
Kind regards,
Ville Valkonen

Reply via email to