Comments (2)
For those interested, I think I found a way of doing it:
root@netflowcollector:/var/cache/nfdump# nfdump -R nfcapd.201701020744 -o "fmt:%ts %te %pr %sap %xsa %fl" -a 'src xip 100.64.2.110'
Date first seen Date last seen Proto Src IP Addr:Port X-late Src IP Flows
2017-01-02 08:52:05.655 2017-01-02 08:52:26.531 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 07:46:32.478 2017-01-02 07:46:50.012 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 07:45:17.130 2017-01-02 07:45:36.555 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 08:52:05.650 2017-01-02 08:52:23.281 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 07:46:32.481 2017-01-02 07:46:54.349 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 08:52:10.532 2017-01-02 08:52:27.349 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 08:52:10.525 2017-01-02 08:52:31.325 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 08:52:05.652 2017-01-02 08:52:19.901 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-03 03:41:24.503 2017-01-03 03:41:44.963 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 08:52:05.651 2017-01-02 08:52:27.611 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 08:52:10.529 2017-01-02 08:52:27.471 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 07:46:32.485 2017-01-02 07:46:54.884 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 08:52:10.533 2017-01-02 08:52:26.796 ICMP 100.64.4.10:0 100.64.2.110 2
2017-01-02 07:46:32.483 2017-01-02 07:46:48.088 ICMP 100.64.4.10:0 100.64.2.110 2
Summary: total flows: 28, total bytes: 0, total packets: 0, avg bps: 0, avg pps: 0, avg bpp: 0
Time window: 2017-01-02 07:45:17 - 2017-01-03 05:14:18
Total flows processed: 92, Blocks skipped: 0, Bytes read: 49448
Sys: 0.008s flows/second: 11500.0 Wall: 0.002s flows/second: 45186.6
from nfdump.
Added x-late ip aggregation, if compiled with NSEL support.
for example:
./nfdump -r nfcapd..xxx -a -A srcip,xsrcip
from nfdump.
Related Issues (20)
- sfcapd not acknowledging -W <Worker> HOT 3
- IPFIX (V10) support for dot1q VLAN IDs HOT 23
- Typo in IPFIX fields HOT 1
- nfdump default workers calculation on low-cpu systems HOT 1
- AS Information HOT 1
- PBlock variables are not printing properly with custom format.
- Bad magic 0x10CF HOT 4
- Runnng nfcapd/sfcapd simultaneously in WSL segfaults... HOT 8
- issues after upgrade - lz4 compression stopped working HOT 10
- nfdump - help/error text for compression argument HOT 1
- nfcapd 1.7.4 - Segmentation Fault HOT 1
- Missing json format in statistic mode HOT 4
- Missing output format for aggregation mode. HOT 4
- Nokia BNG NAT logging support HOT 11
- Invalid order in aggregation mode.
- IPv6/4 address aggregation errors HOT 2
- Aggregation - duplicate entries for router HOT 1
- Strange output for ip4 aggregation with ipv6 filter HOT 2
- nfdump repository HOT 1
- Error while loading shared libraries: libnffile-1.7.4.so: cannot open shared object file: No such file or directory HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nfdump.