Re: [Nfdump-discuss] Have you already worked with nfdump and Asr 1000 NEL ?

[Peter H. <ph...@us...>]

Hi David,

On 29/1/14 2:18 PM, David Villaume wrote:
> Hi,
> 
> I tried the new feature < Asr 1000 NEL > but i can't get the field < vrf id> valid.
> 
> Did someone tried this feature with vrf Nat ?

If you have the enabled NSEL/NEL while compiling (--enable-nsel), then the vrf information should be available. Do not
forget to tell nfcapd to switch on those extension ( -Tnsel or -Tall ). Test the collected record with ./nfdump -o raw.
You'll see the complete record content.

	Regards

	- Peter
> 
> Thanks
> 
> David.
> 
> 
> 
> ------------------------------------------------------------------------------
> WatchGuard Dimension instantly turns raw network data into actionable 
> security intelligence. It gives you real-time visual feedback on key
> security issues and trends.  Skip the complicated setup - simply import
> a virtual appliance and go from zero to informed in seconds.
> http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk
> 
> 
> 
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 

-- 
Be nice to your netflow data. Use NfSen and nfdump :)