[netflow-tools] Collector does not aggregate single flows

Damien Miller djm at mindrot.org
Thu Jul 9 17:55:24 EST 2009


On Tue, 16 Jun 2009, Suraj Nellikar (snellika) wrote:

> 
> Hi,
> 
> When I observe the logs at the flowd collector collecting netflow v9
> packets, I see that it is not aggregating the packets coming from the same
> flow. Instead it is just storing it separately. Is there any way to
> aggregate the packets into a single flow?

It isn't flowd's job to aggrgate flow data, though you can do it yourself
using the supplied perl/python APIs. flowd just records whatever flows
your probe sends to it. Some probes do support aggregation, though they
may use formats or record tags that are not supported by flowd.

-d


More information about the netflow-tools mailing list