Re: [Nfdump-discuss] Re： How can display IP prefix

[Peter H. <pet...@sw...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Chor Keung Li wrote:
> Dear all,
> 
> After reading document, I can create reports by prefix or bit-masks using the filter commands, for example, If looking at the src prefix with mask bit 22, the following comamnd line will work. 
> nfdump -r nfcapd.200907282355 -o "fmt:%sa %fl %byt %pkt" -a -A srcip4/22 
> 
> In this case, however, I must input and specify the mask bit to nfdump to work out the report. Just want to know is nfdump capable to gernerate all the source/destination prefix reports without inputting the mask bits, like the source/destination prefix report in flow-tools? It is a bit inconvenience! 
> 
> Looking forward to your reply and thanks in advance!!!

The mask bits are not stored in current version of nfdump - so it does not work yet.

	- Peter

> 
> Eddie
> 
> 
> ________________________________
> 寄件人﹕ Chor Keung Li <ck...@ya...>
> 收件人 nfd...@li...
> 傳送日期﹕ 2009 年 7月 27 日 星期一 下午 4:46:47
> 主題： How can display IP prefix
> 
> 
> Hello all,
> 
> I'm new to nfdump. How can I display the neflow information with source IP  prefix and destination IP prefix  by using nfdump. I can't see any predefined tags in the customer output format. 
> 
> 
> eg.  192.168.0.10/24     
> 
> 
> Regards,
> 
> Eddie
> 
> 
>       Yahoo!香港提供網上安全攻略，教你如何防範黑客! 請前往 http://hk.promo.yahoo.com/security/ 了解更多!
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
> trial. Simplify your report design, integration and deployment - and focus on 
> what you do best, core application coding. Discover what's new with 
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: pet...@sw... Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iQCVAwUBSnfG6/5AbZRALNr/AQI6KwQAmIsQnIcLDaPWidUH0b8dloqLxwxAS9Pu
0J20zuPjoTRcuEvq84oO20C4ldRNNfV0MkVe1T2LGQFdhtFqdGPaA7mlGjwhwlCw
4+sF0LMwCH2LnzOtubs84+l0M9a644qFq0Z3XgSykB9VAhKMJF7vM0U2M/CoDTAT
LyTNTAxrh8A=
=RDds
-----END PGP SIGNATURE-----