Re: [Nfsen-discuss] [ask] report with asn number

[hendranata y. <hen...@ya...>]

okay thanks for your idea.

what is the latest stable version of nfsen?



On 03/05/21 14.41, Brian Candler wrote:
> On 03/05/2021 01:45, hendranata yahoo wrote:
>> i can see that nfcapd can run with nfasnupd to fill the empty AS number
>>
>> https://metacpan.org/pod/Net::NfDump
>>
>> in this case i am using nfcapd -x "nfasnupd %d/%f"
>>
>> full example:
>>
>> /opt/nfdump/bin/nfcapd -w -D -p 9997 -u netflow -g apache -B 200000 
>> -S 1 -P /data/nfsen/var/run/p9997.pid -z -T all -I EdgeIntl -l 
>> /data/nfsen/profiles-data/live/EdgeIntl -x "nfasnupd %d/%f"
>>
>>
>> the problem is when i do restart nfsen and it is back to the original 
>> without -x "nfasnupd %d/%f"
>>
>> do u have any idea to add that script -x "nfasnupd %d/%f" ? 
>
>
> Try this undocumented feature in /var/nfsen/conf/nfsen.conf
>
> %sources = (
>     '...'  => { ... , 'optarg' => '-x "nfasnupd %d/%f"' },
> )
>
> If that doesn't work, try:
>
> $BUFFLEN = "200000 -x 'nfasnupd %d/%f'";
>
> Or else, just hack the code.  Running
>
> grep -R BUFFLEN /var/nfsen/libexec/
>
> will tell you where to look.
>