[Flow-tools] Storing 6500 netflow

[Mark Fullmer]

This scenario is what -V was implemented for.

On May 21, 2008, at 11:20 AM, Joe Loiacono wrote:

>
> I've started having trouble storing netflow from a 6509. Apparently  
> when restarting flow-capture, depending on which of the MSFC or  
> Supervisor sends the first packet, all data will be stored in that  
> format (either v1 or v7). So, if I restart flow-capture, I may wind  
> up with some files V1 and others v7 in the same directory. Turns out  
> flow-cat will not cross that boundary.
>
> So I plan to use the -V pdu option on flow-capture. Before I make  
> the change (don't want to lose data and not sure how I would tell)  
> does anyone know if flow-capture can store packets from the  
> Supervisor (usually v1) as v7? Should I go with v5 as a compromise :-)
>
> Thanks,
>
> Joe
> _______________________________________________
> Flow-tools mailing list
> flow-tools at splintered.net
> http://mailman.splintered.net/mailman/listinfo/flow-tools

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.splintered.net/pipermail/flow-tools/attachments/20080521/b2c97bae/attachment.htm