[netflow-tools] Does softflowd open a new flow for same IPs but different ports?

Damien Miller djm at mindrot.org
Thu Jan 26 11:01:22 EST 2006

Andreas Brillisauer -- Hetzner Online AG wrote:
> Hello,
> I'm not quite sure about the following. Assuming that softflowd captures
> two IP packets. Both packets have the same source and destination IP but
> different ports. Does softflowd open two flows or only one? If it opens
> two flows, is there a possibility to say softflowd to ignore the ports?

Not at present, but it could be added pretty easily.

Please try the attached patch. It may not apply cleanly against a
released version of softflowd - if this is the case, please try a
snapshot from http://www2.mindrot.org/softflowd_snap/


-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: softflowd-track.diff
Url: http://lists.mindrot.org/pipermail/netflow-tools/attachments/20060126/1a09f7c2/attachment.ksh 

More information about the netflow-tools mailing list