[194890] in North American Network Operators' Group
Re: Proxying NetFlow traffic correctly
daemon@ATHENA.MIT.EDU (Hugo Slabbert)
Tue Jun 6 19:47:56 2017
X-Original-To: nanog@nanog.org
Date: Tue, 6 Jun 2017 16:45:56 -0700
From: Hugo Slabbert <hugo@slabnet.com>
To: Sami <samiii@protonmail.com>
In-Reply-To: <20170606233916.GC7539@bamboo.slabnet.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
--RYJh/3oyKhIjGcML
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue 2017-Jun-06 16:39:16 -0700, Hugo Slabbert <hugo@slabnet.com> wrote:
>
>On Tue 2017-Jun-06 17:43:46 -0400, Sami via NANOG <nanog@nanog.org> wrote:
>
>>Hello,
>>I have been searching for a solution that collects/duplicates NetFlow tra=
ffic properly for a while but i couldn't find any.
>>Do you know any good unix alternative to ntopng, flowd, flow-tools?
>>
>>nprobe of netflow seems to be the closest one to fit my needs but i want =
to see if there are any other solution.
>>
>>My goal is to centralize NetFlow traffic into a single machine and then p=
roxy some flows to other destinations for further analysis
>>
>>Best Regards,
>>Sami
>
>Flexible: pmacct[1][2]
>Simple and does what you ask: samplicate[3]
Actually: samplicate is more all-or-nothing as far as I'm aware. So it=20
could proxy a full set of flows, but the "some flows" part of your request=
=20
I'm not so sure about.
>
>--=20
>Hugo Slabbert | email, xmpp/jabber: hugo@slabnet.com
>pgp key: B178313E | also on Signal
>
>[1] http://pmacct.net/
>[2] https://github.com/pmacct/pmacct
>[3] https://github.com/sleinen/samplicator
--RYJh/3oyKhIjGcML
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)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=Gf8Q
-----END PGP SIGNATURE-----
--RYJh/3oyKhIjGcML--
