ntop / nProbe

Open source components and extensions for nProbe
http://ntop.org
GNU General Public License v2.0
1.62k stars 44 forks source link

Problem about the option of --pcap-file-list #597

Open 5had0wC opened 3 months ago

5had0wC commented 3 months ago

I have some problems with the nprobe.

One is that the option --pcap-file-list was ignored. I'm so confused after reading the document and the help tips. The document shows that there is a file after the option (--pcap-file-list ), which means the file includes the list of files. I wonder what's the format of this file, here is my sample:

Command:nprobe.exe /c --pcap-file-list "C:\Users\user\nprobe\pcap.list" -V 10 -n none -T "%FIRST_SWITCHED%LAST_SWITCHED%IPV4_SRC_ADDR%L4_SRC_PORT%IPV4_DST_ADDR%L4_DST_PORT%PROTOCOL%L7_PROTO%IN_BYTES%IN_PKTS%OUT_BYTES%OUT_PKTS%TCP_FLAGS%FLOW_DURATION_MILLISECONDS%SRC_TO_DST_AVG_THROUGHPUT%DST_TO_SRC_AVG_THROUGHPUT" --dump-format t --csv-separator ";"

pcap.list:/path/to/pcap/file1.pcap /path/to/pcap/file2.pcap /path/to/pcap/file3.pcap

Another problem is with the directory of the output. I find that it always output in the directory like "year/month/day/hour/minute/second". Is there some options to change that?