Upgrading nfdump from 1.6.22 to 1.7.5. nfdump returning different data #591
Closed
SandorGardil
started this conversation in
nfdump-1.7
Replies: 1 comment 1 reply
-
Withe nfdump-1.7.5 the old legacy csv format has been updated into a more flexible and configurable csv output. Strincly speaking, the summary line would pollute the output, as the first line defines, how the following listing is presented. The summary block would not fit anymore. Therefore it has been removed. |
Beta Was this translation helpful? Give feedback.
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi I'm updating a nfdump to 1.7.5 in a project and don't have too much experience with nfdump so sorry if this is a bad question. I had previously asked about my nfcapd not working and was able to get it work, or at least recieving data, with your help. Now it seems im running into issues where we use nfdump to update our rrd file. While trouble shooting I ran this command on one of my flowdata files
nfdump -r {path-to-flowdata} -s dstport -n 1 -N -o csv
and the data that was returned is different between my 1.6.22 machine and my 1.7.5 machine, where the 1.7.5 machine is missing the summary data. I read the man pages for nfdump and the flags seem to be the same so I am a bit confused. Any thoughts on what the issue i'm having may be? Any help I can get is very appreciated, thank you.
Data from 1.6.22 (the type of data I would like to recieve):
ts,te,td,pr,val,fl,flP,ipkt,ipktP,ibyt,ibytP,ipps,ibps,ibpp
2025-01-09 21:20:25,2025-01-09 21:28:57,511.431,any,1900,2520,58.5,5329,28.2,2561294,21.1,10,40064,480
Summary
flows,bytes,packets,avg_bps,avg_pps,avg_bpp
4305,12141418,18908,164156,31,642
Data from 1.7.5:
ts,te,td,pr,val,fl,flP,ipkt,ipktP,ibyt,ibytP,ipps,ibps,ibpp
2025-01-10 12:06:04,2025-01-10 12:13:54,470.545,any,1900,1593,48.7,3443,11.0,1616388,24.6,7,27481,469
Beta Was this translation helpful? Give feedback.
All reactions