I am learning ipfix and found a cmd like this:
tshark -r ipfix.cap -n -d udp.port==4379,cflow -O cflow
What does the cflow
part mean here?
I was also told to filter cflow if I use Wireshark in Windows.
Cflow means Cisco flow. If i can collect some data through that command then tshark works.
tshark
I just do not see how your command can work. Anyway as I said please post your answer if you have it (as an answer, not as a comment) and accept it so that the question does not remain open.