Re: [Nfdump-discuss] nfdump-1.6.10p1 released.

[Root, P. T <Pau...@Ce...>]

That's what I thought.

I sent mail to Simon, he never replied. Maybe there's a mailing list there as well? I'll have to look at that.

My complication, is that this is IPv6 only. Samplicator doesn't handle that yet.

Paul.

-----Original Message-----
From: Peter Haag [mailto:ph...@us...] 
Sent: Tuesday, August 13, 2013 8:51 AM
To: Root, Paul T
Cc: 'nfd...@li...'; 'nfsen-discuss ML'
Subject: Re: [Nfdump-discuss] nfdump-1.6.10p1 released.

Hi Paul,

On 8/13/13 W33 15:01, Root, Paul T wrote:
> Hi Peter,
> 	Thanks for all your work on this project.
> 
> 	I sent mail a week ago, I think you were on Holiday at the time. And I never got a definite answer.

Sorry for that!

> 
> 	I need to forward incoming netflow data to 3 (maybe more) other machines. Is that possible with nfcapd? It appears the '-R' is a single use option and you can only forward to one other address. 
> 
> 	Can you think of a way to send to multiple sources? It needs to be live data.

In that case, you may want to check samplicator from my colleague Simon: http://code.google.com/p/samplicator/
It allows you to resend any UDP traffic to multiple IPs, hence netflow data too.

	- Peter
> 
> Thanks,
> Paul.
> 
> -----Original Message-----
> From: Peter Haag [mailto:ph...@us...]
> Sent: Tuesday, August 13, 2013 1:10 AM
> To: 'nfd...@li...'; nfsen-discuss ML
> Subject: [Nfdump-discuss] nfdump-1.6.10p1 released.
> 
> Hi lists,
> nfdump-1.6.10p1 is available for downloading. It fixes some nasty bugs:
> 
> - Fix bug in netflow v5 mudule: extension map size wrong.
> The warning "extension map size wrong" is fixed in the v5 module. Because this bug was in the collector, you still see the message, if you process nfcapd 1.6.10 files. As before, this is only a warning and corrected automatically. It has no influence on the processed data or the result.
> 
> - Fix nftrack - could coredump in some cases.
> If you use PortTracker you should upgrade.
> - Fix bug nfexport: In some cases could result in wrong flow counter.
> - Fix bug in nfanon - stat record update.
> - Fix -t +/-n time window option.
> Obviously this option was not used a lot. Originally invented in 1.4, it broke in one of the major release updates. It's reconnected again and lists all flows starting and ending within the given time slot in seconds from the start or end of a file e.g. -t -60 lists all flows starting and ending from (t-60 .. t) with t the last time stamp see in a file.
> 
> There are no new features in this release, so updates for IPFIX, ASA NSEL 9.x and others go into 1.6.11.
> 
> 	- Peter
> 
> 
> --
> Be nice to your netflow data
> 
> ----------------------------------------------------------------------
> -------- Get 100% visibility into Java/.NET code with AppDynamics 
> Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with <2% overhead. 
> Download for free and get started troubleshooting in minutes. 
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.c
> lktrk _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 
> ----------------------------------------------------------------------
> -------- Get 100% visibility into Java/.NET code with AppDynamics 
> Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with <2% overhead. 
> Download for free and get started troubleshooting in minutes. 
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.c
> lktrk _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 

--
--
Be nice to your netflow data