Yes, nfcapd can 'fanout' incoming flows with -R host/port .
I am looking for a way to fanout nfcapd flows already written to disk.
Because with my setep I am scp'ing the flows back to the repository;
not fanning them out.
Thanks,
Chad
On Mar 4, 2008, at 2:40 PM, Alex Moura wrote:
On 2008/3/4, Alex Moura <[EMAIL PROTECTED]> wrote:
On 2008/3/3, Peter Haag <[EMAIL PROTECTED]> wrote:
| My question: Is there a better way for nfsen to read in nfcapd flows
| that are already written to disk?
nfreplay usually only reads flows from a single file. It's function
was a
kind of replaced by the fact, that nfcapd itself can forward packets
it receives
to another host/port i.e. another collector.(...)
Hello Peter,
Could you give a command line example to make nfcapd forward packets
to
another host in a constant mode?
I forgot to mention that I saw nfcapd -R option, but could not find
the appropriate
place where to use it.
Thanks,
Alex
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
Chad E. Kotil
Global Research NOC
[EMAIL PROTECTED]
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
