[Flow-tools] Storing 6500 netflow

[Joe Loiacono]

I've started having trouble storing netflow from a 6509. Apparently when 
restarting flow-capture, depending on which of the MSFC or Supervisor 
sends the first packet, all data will be stored in that format (either v1 
or v7). So, if I restart flow-capture, I may wind up with some files V1 
and others v7 in the same directory. Turns out flow-cat will not cross 
that boundary.

So I plan to use the -V pdu option on flow-capture. Before I make the 
change (don't want to lose data and not sure how I would tell) does anyone 
know if flow-capture can store packets from the Supervisor (usually v1) as 
v7? Should I go with v5 as a compromise :-)

Thanks,

Joe
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.splintered.net/pipermail/flow-tools/attachments/20080521/2a0eaa14/attachment.htm