Re: [Nfsen-discuss] [ask] report with asn number

[Brian C. <b.c...@po...>]

On 03/05/2021 01:45, hendranata yahoo wrote:
> i can see that nfcapd can run with nfasnupd to fill the empty AS number
>
> https://metacpan.org/pod/Net::NfDump
>
> in this case i am using nfcapd -x "nfasnupd %d/%f"
>
> full example:
>
> /opt/nfdump/bin/nfcapd -w -D -p 9997 -u netflow -g apache -B 200000 -S 
> 1 -P /data/nfsen/var/run/p9997.pid -z -T all -I EdgeIntl -l 
> /data/nfsen/profiles-data/live/EdgeIntl -x "nfasnupd %d/%f"
>
>
> the problem is when i do restart nfsen and it is back to the original 
> without -x "nfasnupd %d/%f"
>
> do u have any idea to add that script -x "nfasnupd %d/%f" ? 


Try this undocumented feature in /var/nfsen/conf/nfsen.conf

%sources = (
     '...'  => { ... , 'optarg' => '-x "nfasnupd %d/%f"' },
)

If that doesn't work, try:

$BUFFLEN = "200000 -x 'nfasnupd %d/%f'";

Or else, just hack the code.  Running

grep -R BUFFLEN /var/nfsen/libexec/

will tell you where to look.