Hi Ed,
The most pragmatic approach is setting your server to GMT.
If you use nfdump as standalone tool, you may change the filename
after each cycle by using a shell command as -x '/bin/mv ....' to
whatever format you like. Together with NfSen set the system to GMT.
- Peter
On 9/25/10 7:13, Ed Ravin wrote:
> I'm converting from flow-tools to nfdump and I noticed that one issue
> that the nfdump tools, in particular nfcapd, do not seem to have any
> time zone support.
>
> As discussed on this list back in June 2009:
>
>
> http://www.mail-archive.com/[email protected]/msg00240.html
>
> if you are using time-stamped filenames, nfcapd will overwrite its files
> when the local time "falls back" due to a time zone change. The flow-tools
> flow-capture program doesn't have this problem because it appends the
> timezone to the filename.
>
> I also noticed that nfdump, when it prints a time, does not show the
> timezone. This is a problem for me since I need to port my flow-tools
> output parsing scripts and they were looking for the timezone.
>
> How difficult would it be to fix these problems? As pointed out last
> June, there's no good way to use timestamped filenames and avoid file
> overwriting unless you keep your computer's time zone in GMT or turn
> of daylight time, which causes other problems.
>
> Thanks,
>
> -- Ed
>
> ------------------------------------------------------------------------------
> Start uncovering the many advantages of virtual appliances
> and start using them to simplify application deployment and
> accelerate your shift to cloud computing.
> http://p.sf.net/sfu/novell-sfdev2dev
> _______________________________________________
> Nfdump-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
--
--
Be nice to your netflow data
------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
