[netflow-tools] [softflowd] Capture only one subnet
list2009 at lunch.za.net
Thu Jan 17 21:24:30 EST 2013
softflowd accepts a pcap filter expression on the command line
if memory serves (not necessarily true) this may work:
softflowd net 10.2.0.0/16
On 17 Jan 2013 10:08:35 +0100
"Thomas Hupperich" <thomas.hupperich at ruhr-uni-bochum.de> wrote:
> Hello everybody,
> I am rather new to softflowd so I hope my question not to be totally
> Is it possible to capture only one subnet of netflow traffic?
> For instance: If a switch processes traffic of the subnet 10.1.x.x and
> 10.2.x.x, would it be possible to capture only traffic of 10.2.x.x ?
> Actually I am using softflowd to capture netflow traffic and it would
> be best to restrict it only to one subnet directly.
> Alternatively: Is there a way to export only those netflows of a
> specific subnet (e.g. with flow-export from flowtools)?
> Thanks for your help!
> netflow-tools mailing list
> netflow-tools at mindrot.org
You get 3.5 years of bad luck if you break RAID1
More information about the netflow-tools