-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dear all,
It has been brought to my attention, that nfdump-1.6 does
not recognise sampling of flow version 9, exported from JunOS.
Unfortunately I have no Juniper equipment available.
Therefore I would appreciate, if some people could send me
some tcpdumps of exported JunOS flows version 9 with sampling
enabled.
Something like:
./tcpdump -n -i <interface> -s 1600 -p <flow-port> -w /tmp/juniper.raw
I would need a few minutes of flow data ( e.g. 10-20 or so )
such that it includes all version 9 templates and some record data.
Needless to say, that all data, is treated confidential.
Any help is appreciated
Regards
- Peter
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [email protected] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBS124/f5AbZRALNr/AQI6uQP+MWA3s+C4aA2lXUlUz1V3DFiz1j0rNIDV
Y6ZSqknNrH6lbVnvNePn36O9i/q3lTXUFNUR4P6JPDzroQStTVP8B6lrQgmBgkuc
gWGoao8uv4f8doMIJRVPL1CL9Pi/PzM1/9IqFgleZdY0g+3RIlivnqlIO8cUYMBL
9eBFBua6pWs=
=yxEN
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
