Re: [Nfdump-discuss] nfdump and time zones

[Peter H. <ph...@us...>]

Hi Ed,
The most pragmatic approach is setting your server to GMT.
If you use nfdump as standalone tool, you may change the filename
after each cycle by using a shell command as -x '/bin/mv ....' to
whatever format you like. Together with NfSen set the system to GMT.

	- Peter

On 9/25/10 7:13, Ed Ravin wrote:
> I'm converting from flow-tools to nfdump and I noticed that one issue
> that the nfdump tools, in particular nfcapd,  do not seem to have any
> time zone support.
> 
> As discussed on this list back in June 2009:
> 
>  http://www.mail-archive.com/nfd...@li.../msg00240.html
> 
> if you are using time-stamped filenames, nfcapd will overwrite its files
> when the local time "falls back" due to a time zone change.  The flow-tools
> flow-capture program doesn't have this problem because it appends the
> timezone to the filename.
> 
> I also noticed that nfdump, when it prints a time, does not show the
> timezone.  This is a problem for me since I need to port my flow-tools
> output parsing scripts and they were looking for the timezone.
> 
> How difficult would it be to fix these problems?  As pointed out last
> June, there's no good way to use timestamped filenames and avoid file
> overwriting unless you keep your computer's time zone in GMT or turn
> of daylight time, which causes other problems.
> 
> Thanks,
> 
> 	-- Ed
> 
> ------------------------------------------------------------------------------
> Start uncovering the many advantages of virtual appliances
> and start using them to simplify application deployment and
> accelerate your shift to cloud computing.
> http://p.sf.net/sfu/novell-sfdev2dev
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

-- 
--
Be nice to your netflow data