-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 23/02/2006 21:30, Prakash RudraRaju wrote: > On Thu, 23 Feb 2006, Paolo Lucente wrote:
>>> I also want to get rid of mac_src and mac_dst fields in the table and want >>> to add as_src and as_dst fields. just creatign a table deleting some >>> fields is not working. >> Remember that MAC addresses are not supported by NetFlow v5, so enabling >> them in the 'aggregate' line will return just empty fields. The chance is >> to upgrade to NetFlow v9. > > I am getting netflow data from a router.. so I don't think I will get MAC > addresses even if I upgrade. I have modified the table from example. To the best of my knowledge (I'm pretty certain) netflow is layer3+ so will never show layer2 (eg MAC addresses). MAC addresses are shown in sflow (picked up by sfacctd), and probably also picked up by those using pmacctd. I guess what you're trying to do is minimise the size of the database by removing unwanted fields (or, in this case, fields that will never be populated with real/useful data). Cheers Ivan - -- Ivan Beveridge <[EMAIL PROTECTED]> http://www.linx.net/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEBX8FQQZN5jq7vncRAnf7AKCCfhPPVlkl8Fr/oeI0rwOCP2jSaACfSroT kWAuMvg8HKoWIQ2hs+Zeii0= =JhzT -----END PGP SIGNATURE-----
