Hello,
I am having difficulties selectively applying scaling with flow-capture. I
want to apply a scaling factor only if the flow doesn't come from engine-id 0.
Based on reading docs and looking at examples I came up with:
--- filter.cfg ---
filter-primitive engine-id-0
type engine
permit 0
filter-definition engine-zero
match engine-id engine-id-0
--- xlate.cfg ---
include-filter /nfs/netflow/etc/filter.cfg
xlate-action scale
type scale
scale 128
xlate-definition scale-up
term
filter engine-zero
stop
term
action scale
--- end ---
Here's how I call flow-capture:
/usr/bin/flow-capture -n 287 -N 3 -S 60 \
-p /var/run/netflow/ft-my-rtr -z 6 \
-w /nfs/netflow/data/raw/my-rtr \
-x /nfs/netflow/etc/xlate.cfg \
-X scale-up x.x.x.x/x.x.x.x/20069
The problem is that flow-capture exits immediately without reporting any kind
of error. Adding -d flags doesn't generate any error output either.
Is the configuration about do what I want it to?
Any help would be greatly appreciated.
Thanks,
Jon
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
