Elouan
nfreplay i working for me and I am sending the dat ago the other system fine,
it may work for you to replay data into your system.
However, on my setups, the time stamp on the replied data is off by 1 day .
nfdump shows the correct date when displayed to screen. The flow data in
flight (grabbed with wireshark) and on the other system shows the time stamp
minus 1 day
I'm still looking for the cause of that issue.
Steve
Date: Fri, 16 Oct 2015 08:39:45 +0000
From: "LE-BRETTON, ELOUAN (ELOUAN)"
<[email protected]>
Subject: Re: [Nfsen-discuss] nfreplay - is anyone resending nfcapd
data to other services ?
To: "[email protected]"
<[email protected]>
Message-ID:
<48cc295db612d744ad3555c102ca43b9013d1f3...@fr711wxchmba01.zeu.alcatel-lucent.com>
Content-Type: text/plain; charset="iso-8859-1"
Hi, I'm trying to do something similar (see topic " Copy collected data from PC
to server" ). I haven't tried nfreplay yet, I tried the command line interface
to rebuild a profile:
- Launch command : nfsen -r live all
Unfortunately, it's creating a bug on my system: live profile doesn't collect
any traffic anymore :-( I suspect this is because I'm trying to put data
anterior to the creation of the live profile, but I haven't been able to change
that... nor have I been able to create a profile anterior to the live profile
....
I'm thinking of trying nfreplay, haven't found the time yet!
-----Message d'origine-----
De?: Steve Benoit [mailto:[email protected]]
Envoy??: jeudi 15 octobre 2015 15:52
??: [email protected]
Objet?: [Nfsen-discuss] nfreplay - is anyone resending nfcapd data to other
services ?
Is anyone using nfrepaly to replay or transfer data to another netflow system?
I'm trying to replay a half terabyte of nfcapd data to re-analyze it.
Steve Benoit
Media Services & Network Communications Infrastructure Georgian College| One
Georgian Drive| Barrie?ON |?L4M?3X9 705.728.1968,?ext. 1185 | georgiancollege.ca
------------------------------------------------------------------------------
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
