[Nfdump-discuss] Question about NBAR exporting using NetFlow

[Krzysztof S. <Krz...@ra...>]

Hello!

nfdump does not understand Cisco application options:

_____________________________________________________________________________
| Field | ID | Ent.ID | Offset | Size |
-----------------------------------------------------------------------------
| APPLICATION ID | 95 | | 0 | 4 |
| application category name | 45000 | 9 | 4 | 32 |
| application sub category name | 45001 | 9 | 36 | 32 |
| application group name | 45002 | 9 | 68 | 32 |
| p2p technology | 288 | | 100 | 10 |
| tunnel technology | 289 | | 110 | 10 |
| encrypted technology | 290 | | 120 | 10 |

Has anybody attempted to add this before?
I would be grateful if pointed where I need to make changes.

Krzysztof Szemiot
Network Engineering & Operations
Raytheon Company