[Nfdump-discuss] Select all sources for a given profile in query

[Rick H. <r.j...@ut...>]

Dear list,

I’m looking for a simple way to select all sources in a given profile for a certain query. So instead of specifying the sources manually as in [1], I’m looking for something that works like [2].

[1] nfdump -M /data/nfsen/profiles-data/SSH/source1:source2/ -r nfcapd.201312151000

[2] nfdump -M /data/nfsen/profiles-data/SSH/*/ -r nfcapd.201312151000

So without knowing all sources for a profile beforehand, I want to select all of them. Does someone of you know how to do this?

Best regards,

--
Rick Hofstede