Can compression in nfcapd be enabled?

 
3
2
1

Can compression in nfcapd be enabled?

    CommentAdd your comment...

    1 answer

    1.  
      2
      1
      0

      thanks for your question - you're raising a very good point.

      the answer is yes, you can; i've just verified that this works. nfdump fortunately handles the compression issue seamlessly and automatically detects whether nfcapd has saved compressed data.

      however, the init script we ship for nfcapd doesn't offer a comfortable mechanism to set that option  - yet.
      for version 3.0.5 of opflow you'll have to edit /etc/init.d/nfdump and adjust the line where DAEMON_ARGS is set. for the next version we'll add support for handling this via EXTRA_ARGS in /etc/sysconfig/nfdump and /etc/default/nfdump rsp.

      1. David Walsh

        Thank you. I have enabled it (with the -z flag) and the resulting file for me is 1/3 of the size.

         

        Cheers

      CommentAdd your comment...