[netflow-tools] PCAP file -> NetFlow v5

thealy thealy at bnl.gov
Wed Dec 2 03:56:29 EST 2009


I'm using sysflowd to read in PCAP files and generate NetFlow packets.
Unfortunately it does not appear to retain the original timestamps, but
rather inserts the time that the program is run. I'm running it with
these options:

softflowd -r filtered-23nov09.pcap -n 1.2.34:1111

Is there a way to preserve the original timestamp, or another tool that
will achieve the same goal?



More information about the netflow-tools mailing list