[netflow-tools] Simple netflow probe for linux
djm at mindrot.org
Thu Oct 1 16:05:22 EST 2009
On Mon, 24 Aug 2009, Koteswar wrote:
> But while sending template record better not to add the unwanted fields like
> protocol and port. And in case of sending data record also donot add the
> fields protocol and ports if track level "ip" is selected. In softflowd we
> are sending all the fields independent of track level but setting unwanted
> fields to 0.
Yes, this is true. I did it this way to keep the nf.9 export code simple,
and because the track level stuff was really only intended as a way to
reduce load on the sensor and the total number of exported flows.
If someone wants to help renovate the nf.9 export code then this can
More information about the netflow-tools