[Nfdump-discuss] Re: Re: Re: Re: Re: Re: How can display IP prefix
netflow collecting and processing tools
Brought to you by:
phaag
From: Chor K. Li <ck...@ya...> - 2009-08-13 05:00:23
|
Dear Peter, Any suggestion regarding the src/dst mask bits issue in nfdump-1.6b. Thanks! Eddie ________________________________ 寄件人﹕ Chor Keung Li <ck...@ya...> 收件人 pet...@sw... 副本(CC) nfd...@li... 傳送日期﹕ 2009 年 8月 5 日 星期三 下午 3:44:28 主題: Re: [Nfdump-discuss] Re: Re: Re: Re: How can display IP prefix Dear Peter, I downloaded and installed the nfdump-1.6b-snapshot-20090619 version, and then the nfcapd collect the netflow V5 from a CISCO router. However, the report can't display the src mask and dest mask when i using the command nfdump -r nfcapd.200908051215 -o "fmt:%sa %da %smk %dmk %fl %byt %pkt" -a -A srcip,dstip It just shows the 0 "zero" on the fields, lik the following Src IP Addr Dst IP Addr SMask DMask Flows Bytes Packets 202.X.X.143 203.194.210.172 0 0 11 9931 117 203.X.174.3 203.194.210.208 0 0 2 3660 33 How can I know the nfdump has been stored the src mask and dest mask bits? Thanks! Eddie ________________________________ 寄件人﹕ Peter Haag <pet...@sw...> 收件人 Chor Keung Li <ck...@ya...> 副本(CC) nfd...@li... 傳送日期﹕ 2009 年 8月 5 日 星期三 下午 1:36:45 主題: Re: [Nfdump-discuss] Re: Re: Re: Re: How can display IP prefix -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Chor Keung Li wrote: > Dear Peter, > > You mean after version 1.6b-xxx, nfdump can dump the report of src/dst prefix per mask bits, like the flow-tools does? > When will be the stable version of 1.6.x released? Any schedule? I will think about that. - Peter > > Thank you so much for your reply!! > > Eddie > > > > ________________________________ Yahoo!香港提供網上安全攻略,教你如何防範黑客! 請前往 http://hk.promo.yahoo.com/security/ 了解更多! |