[netflow-tools] Does softflowd open a new flow for same IPs but different ports?

[Damien Miller]

Andreas Brillisauer -- Hetzner Online AG wrote:
> Hello,
> 
> I'm not quite sure about the following. Assuming that softflowd captures
> two IP packets. Both packets have the same source and destination IP but
> different ports. Does softflowd open two flows or only one? If it opens
> two flows, is there a possibility to say softflowd to ignore the ports?

Not at present, but it could be added pretty easily.

Please try the attached patch. It may not apply cleanly against a
released version of softflowd - if this is the case, please try a
snapshot from http://www2.mindrot.org/softflowd_snap/

-d

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: softflowd-track.diff
Url: http://lists.mindrot.org/pipermail/netflow-tools/attachments/20060126/1a09f7c2/attachment.ksh