Re: [Nfdump-discuss] Using nfpcapd to capture packet dumps and forward to nfcapd on another machine

[Peter H. <ph...@us...>]

Hi Hashim,
Not sure, if I understand you correctly:
First of all - nfpcapd is still considered experimental! You end up having pcaps on one side and nfcaps on the other side, equally sliced.
Which files do you want to forward now? If you forward it to an nfcapd, it must be netflow compatible. What eventually could be integrated
into nfpcapd is a -R for flow data - so the capturiing host need not to be the collecting host.

Cheers

	- Peter

On 10/04/15 09:38, Maqbool Hashim wrote:
> Hi Peter,
> 
>  
> 
> Just started playing with nfdump- great set of tools! 
> 
>  
> 
> I was wondering if it is possible to replay packets captured by nfpcapd for sending to another host.  Basically looking at capturing packets using nfpcapd on one machine then send to a listening nfcapd flow collector process on another machine.  I
> guess the functionality is equivalent to the -R switch in nfcapd options.  Maybe I can achieve this by piping nfpcapd output into nfcapd somehow?
> 
>  
> 
> Thanks,
> 
>  
> 
> Hashim
> 
> 
> 
> ------------------------------------------------------------------------------
> BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT
> Develop your own process in accordance with the BPMN 2 standard
> Learn Process modeling best practices with Bonita BPM through live exercises
> http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_
> source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF
> 
> 
> 
> _______________________________________________
> Nfdump-discuss mailing list
> Nfd...@li...
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
>