the fairly important flow record flags (e.g. event vs. flow) are not accessible with any custom format; only -o raw prints them (which doesn't print other things, e.g. the nr of flows).
this is very easy to fix and i've amended this in our fork of nfdump; pull request will follow.
phaag
commented
8 years ago
the fairly important flow record flags (e.g. event vs. flow) are not accessible with any custom format; only -o raw prints them (which doesn't print other things, e.g. the nr of flows).
this is very easy to fix and i've amended this in our fork of nfdump; pull request will follow.