[netflow-tools] Can softflowd read from stdin?

John Marrett johnf at zioncluster.ca
Sun Mar 10 04:03:48 EST 2013


Per,

> I try to find out if softflowd can read a pcap-'stream' from standard input? I know that softflowd can read from file with '-r file', but I need to read from a unix | (pipe) like tcpdump can do with 'tcpdump -r -'. Is it already possible today or is it easy to add it somewhere in the code?

Yes, it should be able to read from stdin using -r -, at least based on 
my understanding of the source [1] and function it calls ( 
pcap_open_offline [2] ).

Have your tried it; is it not working properly for you?

[1] http://code.google.com/p/softflowd/source/browse/softflowd.c#1388
[2] http://www.manpagez.com/man/3/pcap_open_offline/

-JohnF


More information about the netflow-tools mailing list