Hi Richard,
nfcapd creates files nfcapd.yyymmddhhmm therefore the minimum interval is
1min - 60s. So far there was no need to go smaller than 1min. It also would
affect the filenames which would create incompatibilities.
However, it rel. easy to adapt the code.
- Peter
On 14.04.16 19:38, Richard Mayers wrote:
> Hi Folks,
>
> I have been using nfcapd to collect netflow data for a while. However
> the minimum -t 1 interval of 60 seconds is too high for what I want to
> do. My exporter is not a cisco router and the flow time outs are set
> to 1 second so they are exported all the time. Is there an easy way to
> process the received netflow data in a smaller period of time? I have
> seen other tools that can do it every second.
>
> Kind regards,
> Richard
>
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> _______________________________________________
> Nfdump-discuss mailing list
> Nfdump-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
>
--
Be nice to your netflow data. Use NfSen and nfdump :)
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
