Re: [Nfdump-discuss] Update ASN in nfdump
netflow collecting and processing tools
Brought to you by:
phaag
|
From: Tim K. <ti...@ha...> - 2014-05-22 15:39:58
|
Hi James, On 19.05.2014 6:10 PM, James Deaton wrote: > About a year ago, Tomas Podermanski had a post about his perl library that > provides some of this functionality with a great example script that you > might review (nf_asn_geo_update): > > http://sourceforge.net/p/nfdump/mailman/message/30847760/ > > http://search.cpan.org/~tpoder/Net-NfDump-0.05/lib/Net/NfDump.pm > > It's not quite what you asked but you could have it populate the fields at > file rotation. We used this for some time while dealing with errant data > that was being populated by the manufacturer we work with. The country code > population was rather unique and provided for some interesting (and quick) > analysis. Perfect, that was the answer I searched for! I've looked into the scripts and might come along with a solution which I will publish on the mailinglist. Many thanks, Tim |