bwilliams-signups at jadeworld
Dec 22, 2010, 12:10 PM
Post #2 of 2
(326 views)
Permalink
|
Got it working now, nfcapd needed "-T all" option.
Ben
On Wed, Dec 22, 2010 at 12:10 PM, Ben WIlliams
<bwilliams-signups [at] jadeworld> wrote:
> Anyone successfully tried using -E parameter for setting engine id? I
> tried setting engine_type and engine_id so the collector knows where
> the flows came from.
> ie
> nprobe -i eth0 -I nprobe-eth0 -G -E 3:1 -V9 -T "%IPV4_SRC_ADDR
> %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS
> %IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT
> %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK
> %IPV4_DST_MASK %ENGINE_TYPE %ENGINE_ID" -n collectorhost:2055
>
> Using collector nfdump/nfcapd just shows engine type and id as 0.
>
> Thanks
> Ben
>
_______________________________________________
Ntop-misc mailing list
Ntop-misc [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
|
