Good Morning All, This morning I've moved from using nfdump snapshot-20070808 to 1.5.6 and nfsen 1.3b-20070824 to 1.3. Everything has gone wonderfully.
The primary reason for my upgrade was compression, I'm seeing 23Mb segments down to about 8-9Mb, brilliant! I've had a quick look and I can't see an obvious way to convert older data. I was considering some find(1) and xargs(1) magic and converting them by hand. nfdump -r nfcapd.old -w - | nfdump -w nfcapd.new -z However I don't seem to be able to set the ident on the outputting nfdump side, which I believe is critical for nfsen. I've had a quick look at the release notes for 1.5.7 (always the way eh, a release a week after I'd tested 1.5.6 ;) and I can't see anything that notes either a quick way to convert or set an ident from nfdump. Is there any way at current to do this? I mean it's not an uber priority, but it'd be nice to reclaim 700Gb back, which would mean I could start playing with sflow in comfort. As always thanks to Peter for a great tool! Peter. -- Peter A. Wood e: [EMAIL PROTECTED] Network Security Specialist Technical Services Group Lancaster University PGP Fingerprint: C3B5 376B 16C5 F8D1 E3AE 617F 5718 C338 1D06 0689
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
