Hi Hashim,
Not sure, if I understand you correctly:
First of all - nfpcapd is still considered experimental! You end up having
pcaps on one side and nfcaps on the other side, equally sliced.
Which files do you want to forward now? If you forward it to an nfcapd, it must
be netflow compatible. What eventually could be integrated
into nfpcapd is a -R for flow data - so the capturiing host need not to be the
collecting host.
Cheers
- Peter
On 10/04/15 09:38, Maqbool Hashim wrote:
> Hi Peter,
>
>
>
> Just started playing with nfdump- great set of tools!
>
>
>
> I was wondering if it is possible to replay packets captured by nfpcapd for
> sending to another host. Basically looking at capturing packets using
> nfpcapd on one machine then send to a listening nfcapd flow collector process
> on another machine. I
> guess the functionality is equivalent to the -R switch in nfcapd options.
> Maybe I can achieve this by piping nfpcapd output into nfcapd somehow?
>
>
>
> Thanks,
>
>
>
> Hashim
>
>
>
> ------------------------------------------------------------------------------
> BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT
> Develop your own process in accordance with the BPMN 2 standard
> Learn Process modeling best practices with Bonita BPM through live exercises
> http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_
> source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF
>
>
>
> _______________________________________________
> Nfdump-discuss mailing list
> Nfdump-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
>
------------------------------------------------------------------------------
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
