I think nsen (and softflowd) can read a previously-captured pcap file,
derive flow data from the captured packets, and turn it in to Cisco
netflow packets to send to a collector.
Looks like I'm going to have to ditch the file I'm currently writing
(instead of altering its format) and concentrate on generating and
sending Cisco netflow packets to a collector, as that's apparently the
common format involved in this whole scheme.
Ah well, what's another socket write to the router daemon.
Thanks folks!
- Brian
On Sun, May 21, 2017 at 11:51:12AM -0400, lleachii--- via 44Net wrote:
(Please trim inclusions from previous messages)
_______________________________________________
Brian,
As I recall, nfsen saves in pcap...verify, but that might be more helpful to
you/us.
- KB3VWG
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net