-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


- --On February 25, 2008 10:34:00 +0000 Peter Wood <[EMAIL PROTECTED]> wrote:

| Good Morning All,
|
| This morning I've moved from using nfdump snapshot-20070808 to 1.5.6 and
| nfsen 1.3b-20070824 to 1.3. Everything has gone wonderfully.
|
| The primary reason for my upgrade was compression, I'm seeing 23Mb
| segments down to about 8-9Mb, brilliant! I've had a quick look and I
| can't see an obvious way to convert older data.
|
| I was considering some find(1) and xargs(1) magic and converting them by
| hand.
|
| nfdump -r nfcapd.old -w - | nfdump -w nfcapd.new -z
|
| However I don't seem to be able to set the ident on the outputting
| nfdump side, which I believe is critical for nfsen. I've had a quick
| look at the release notes for 1.5.7 (always the way eh, a release a week
| after I'd tested 1.5.6 ;) and I can't see anything that notes either a
| quick way to convert or set an ident from nfdump.
|
| Is there any way at current to do this? I mean it's not an uber
| priority, but it'd be nice to reclaim 700Gb back, which would mean I
| could start playing with sflow in comfort.

Sure! Use nfdump -j <file>
This is a simple switch, which compresses an uncompressed file and vice versa.
To check, if a file is compressed, use nfdump -v <file>

so for converting older files use something like:
find . -name nfcapd.\* -exec nfdump -j {} \;

|
| As always thanks to Peter for a great tool!

Thanks! - It's a pleasure to hear that!

    - Peter

|
| Peter.
| --
| Peter A. Wood                     e: [EMAIL PROTECTED]
| Network Security Specialist
| Technical Services Group
| Lancaster University
|
| PGP Fingerprint:
| C3B5 376B 16C5 F8D1 E3AE  617F 5718 C338 1D06 0689
|
|



- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iQCVAwUBR8Klvv5AbZRALNr/AQJU9gQAlVVm6gzvlge5kKaP0mp7KGplrhntK/N/
mO06fjt3PpvLOuKrtwGYWgYVIiGcPy013ubuWIw5OW/1QQHrISs2wHNVOFBH04H0
W7K2QMZr8C6GD00rLyio2EN4rHUL0VWbgh2lK70wkP/Vi1aGYZ3ukZXgrAB5BIT2
FLZoPsD7dXM=
=2/YF
-----END PGP SIGNATURE-----


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to