Hi John,
The resulting file of your command is not compressed. Use -z in order to
compress the output.
To compress the existing file, run ./nfdump -j netflow_dump.20120606
This should considerably shrink the size.
Maybe I should make compression the default, as compatibility to those
uncompressed days is long back ....
- Peter
On 6/8/12 2:12, John Elliot wrote:
> Hi Guys,
>
>
> Is it "normal" for the converted file (flow-tools -> nfdump) to be a lot
> larger that the original flow-tools file(s)
>
>
> i.e.
>
>
> Orginal flow-tools files (24hours):
>
>
> /netflow/oar/krc3.v5/2012/2012-06/2012-06-06# du -mh
> 939M .
>
>
> Converted via:
>
>
> flow-cat ft-v05.2012-06-06.* | ft2nfdump | nfdump -w netflow_dump.20120606
>
>
> And resulting file is 4Gb?
>
>
> -rw-r--r-- 1 root root 4.0G Jun 8 09:52 netflow_dump.20120606
>
>
> Cheers
>
>
> This body part will be downloaded on demand.
>
>
>
> This body part will be downloaded on demand.
--
--
Be nice to your netflow data
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
