[netflow-tools] Simple netflow probe for linux

[Damien Miller]

On Mon, 24 Aug 2009, Koteswar wrote:

> But while sending template record better not to add the unwanted fields like
> protocol and port. And in case of sending data record also donot add the
> fields protocol and ports if track level "ip" is selected. In softflowd we
> are sending all the fields independent of track level but setting unwanted
> fields to 0.

Yes, this is true. I did it this way to keep the nf.9 export code simple,
and because the track level stuff was really only intended as a way to
reduce load on the sensor and the total number of exported flows.

If someone wants to help renovate the nf.9 export code then this can
change :)

-d