Re: [pmacct-discussion] Pcap file input & Netflow basic doubts

2018-08-12 Thread Paolo Lucente
Hi, About your NetFlow doubts, you should really review how NetFlow works - plenty of doc is available online. You will see that, compared to sFlow, NetFlow caches flows. Not sure about the time point you make, i do not see any timestamp-related primitive (ie. timestamp_start, timestamp_end) men

Re: [pmacct-discussion] Pcap file input & Netflow basic doubts

2018-08-12 Thread Paolo Lucente
Hi, To confirm all daemons (pmacctd included) read a given file once. From what i read you really want to do live collection off of an interface. Paolo On Sat, Aug 11, 2018 at 12:34:41AM +0530, RAJESH KUMAR S.R wrote: > Looked at the CONFIG-KEYS doc and there were options for pcap files, So, I

Re: [pmacct-discussion] Pcap file input & Netflow basic doubts

2018-08-10 Thread RAJESH KUMAR S.R
Looked at the CONFIG-KEYS doc and there were options for pcap files, So, I tried with " pcap_savefile: temp.pcap savefile_wait: true " But the pmacctd is reading only once, even though the file is updated with new packets, I'm not able to see new data on pmacct side. On Sat, Aug 11, 2018 at 12