Re: [Nfdump-discuss] Question about NBAR exporting using NetFlow

[Krzysztof S. <Krz...@ra...>]

Not sure if my first question made it to the list, resending.
Sorry if repeating.

Krzysztof

> Hello!
>
> nfdump does not understand Cisco application options:
>
>
_____________________________________________________________________________
> | Field | ID | Ent.ID | Offset | Size |
>
-----------------------------------------------------------------------------
> | APPLICATION ID | 95 | | 0 | 4 |
> | application category name | 45000 | 9 | 4 | 32 |
> | application sub category name | 45001 | 9 | 36 | 32 |
> | application group name | 45002 | 9 | 68 | 32 |
> | p2p technology | 288 | | 100 | 10 |
> | tunnel technology | 289 | | 110 | 10 |
> | encrypted technology | 290 | | 120 | 10 |
>
> Has anybody attempted to add this before?
> I would be grateful if pointed where I need to make changes.

> Krzysztof Szemiot
> Network Engineering & Operations
> Raytheon Company