Re: [Nfdump-discuss] [Nfsen-discuss] ICMP "port"?
netflow collecting and processing tools
Brought to you by:
phaag
From: Peter H. <ha...@sw...> - 2006-09-11 13:38:23
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------- Original Message -------- From: "Kiss Gabor [Bitman]" <ki...@ss...> To: Peter Haag <ha...@sw...> Subject: Re:[Nfsen-discuss] ICMP "port"? Date: Thu Aug 17 2006 10:01:00 GMT+0200 (CEST) > On nfsen-discuss list Peter Haag wrote: > >> Starting with snapshot 20060614 icmp type/code is decoded in printed >> as 'type:code' >> >> nfdump-stable: >> 127.0.0.1:0 -> 127.0.0.2:771 >> >> nfdump-snapshots: >> 127.0.0.1:0 -> 127.0.0.2 3:1 > > Just a note: if number of words may vary from line to line > output of nfdump is harder to parse. > Maybe 127.0.0.2:3.1 or 127.0.0.2:3/1 would be a bit better. ok - 127.0.0.2:3.1 is accepted. I can patch that - even if it's 3.3 - Peter > (BTW: 771 is 3.3 ;-) > > Gabor > - -- _______ SWITCH - The Swiss Education and Research Network ______ Peter Haag, Security Engineer, Member of SWITCH CERT PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland E-mail: pet...@sw... Web: http://www.switch.ch/security -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iQCVAwUBRQVmwf5AbZRALNr/AQKJfgP/SPCi9VegGB+DoeshtLPj+msMij/tPfWs 8HJv6RZW+++voOGTpkliPeXAkpJQiSnYnR0iMstI0+6BlfEp36EfIITJfBVyj34i 7VefO45DRWUKEZJSdkaW24MELfqYDFdJgsy7qiFcBrEN+P1IuDTJrzHBe/Ss5NBu LivaNQeTwx4= =14E4 -----END PGP SIGNATURE----- |