Hello, I am trying to capture some PCAP files into nfdump format via nfcapd. I am using version 1.6.13, built from source on OS X. I configured my installation like this:
./configure --enable-devel --enable-sflow --enable-readpcap --enable-nfcapd I then invoked nfcapd this way: nfcapd -z -w -D -T all -l /tmp/allflows -I any -S 2 -p 9998 -f ~/my-pcap-file.pcap The stdout shows a large number of "Add extension..." lines, then "Setup pcap reader" at the end. The generated files, though (underneath /tmp/allflows) appear to not have any data. They are all exactly 276 bytes, no matter what pcap input file I use (have tried a variety of them). Any suggestions on what I'm doing wrong? Thanks. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Nfdump-discuss mailing list Nfdump-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
