Nfdump and the filed ethernet type

[Becheikh]

Hi Folks,

Is it possible to get an ethernet type using nfdump when I try to use as a netflow analyzer?

best regards

[phaag]

You would need a netflow exporter, which exports that field with ID 256. Up to now, nfdump does not collect that field, as there was no demand so far.

[Becheikh]

Thanks for your answer. I'm interested in that field

[phaag]

Do you have an exporter sending this tag? If so send me a sample pcap to my email in the authors file.