[Nfdump-discuss] nfcapd/nfdump and v9 w/ Palo Alto Extensions

[Randal T. R. <ra...@pr...>]

Is there confirmation that nfdump can process these flows correctly? We
have some weird activity reported that I haven't verified.

Also, when testing specialty flow types (vendor extensions), what is the
best way to collect and replay (for example, I don't have PA machines)?

Does nfreplay, when set to v9, move them w/ extensions or is something
lost in translation? I need a way to do the same w/ IPFIX.

Thank you!