I think nsen (and softflowd) can read a previously-captured pcap file, derive flow data from the captured packets, and turn it in to Cisco netflow packets to send to a collector.
Looks like I'm going to have to ditch the file I'm currently writing (instead of altering its format) and concentrate on generating and sending Cisco netflow packets to a collector, as that's apparently the common format involved in this whole scheme.
Ah well, what's another socket write to the router daemon.
Thanks folks! - Brian
On Sun, May 21, 2017 at 11:51:12AM -0400, lleachii--- via 44Net wrote:
(Please trim inclusions from previous messages) _______________________________________________ Brian,
As I recall, nfsen saves in pcap...verify, but that might be more helpful to you/us.
- KB3VWG
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net