Hi,
I have multiple gigs of stored netflow data from nfacpd.
Would 'replaying' it back into nfacctd cause the process to recognise
any old timestamps or would it think it's new traffic?
eg.
# for i in * ; do nfreplay -H 192.168.2.111 -p 3001 -r $i ; done
#
C.
--
Media Service Provider Ltd.
Hi Charlie,
The 'nfacctd_time_new' directive is by default set to false, meaning
original timestamps would be honoured (and aggregates inserted in the
correct time-bin).
Would also suggest to ensure keeping the 'sql_dont_try_update' to false
(which is the default) - as you are going to do
