[flow-tools] flow-capture and CISCO Spec.

[Kyle Caine]

 Hello,

I'm working on some tools to process NetFlow data from my companies=20
intranet and found flow-tools quite comftable. Unfortunately the files=20
generated by flow-capture doesn't conform to the specs, CISCO release for=
=20
NetFlow flows.
Eg. flow-capture exported files (V5) have a 96 Byte header containing=20
fields like hostname etc. and then flow records with additional paddings=20
and size of 64 bytes, whereas CISCO describes a 24 bytes header und 48=20
bytes record format in their white papers.

Now my questions:
- What was the intention of using this noncomforming format within=20
flow-tools?

- Is there a possibility to tell flow-capture to export the received=20
packages in raw format?

- Is it likely that this internal format will change in future versions o=
f=20
flow-tools?

Thanks, Kyle