Re: [Nfdump-discuss] [Nfsen-discuss] ICMP "port"?
netflow collecting and processing tools
Brought to you by:
phaag
From: Kiss G. [Bitman] <ki...@ss...> - 2006-08-17 08:01:15
|
On nfsen-discuss list Peter Haag wrote: > Starting with snapshot 20060614 icmp type/code is decoded in printed as 'type:code' > > nfdump-stable: > 127.0.0.1:0 -> 127.0.0.2:771 > > nfdump-snapshots: > 127.0.0.1:0 -> 127.0.0.2 3:1 Just a note: if number of words may vary from line to line output of nfdump is harder to parse. Maybe 127.0.0.2:3.1 or 127.0.0.2:3/1 would be a bit better. (BTW: 771 is 3.3 ;-) Gabor |