On Mon, Apr 28, 2008 at 09:06:30PM -0400, Glenn Hochberg wrote: > On Apr 28, 2008, at 4:41 PM, [EMAIL PROTECTED] wrote: > Curious how the netflow data got stored in those files originally? > I.e., what format are they in?
> Fair question (as to how they got stored in the files), but I don't > know the answer. There are collectors somewhere in another > organization that store what appears to be the raw PDUs in v5 format > (i.e. binary). If those packets were captured from the line, you might be able to re-insert them with tcpreplay, or another program (maybe hping?) that lets you stick raw data into packets. If you can play them back on a network interface then you could capture them with flow-capture the usual way. _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
