[netflow-tools] [softflowd] Capture only one subnet

[Andrew McGill]

softflowd accepts a pcap filter expression on the command line

if memory serves (not necessarily true) this may work:

	softflowd net 10.2.0.0/16

&:-)

On 17 Jan 2013 10:08:35 +0100
"Thomas Hupperich" <thomas.hupperich at ruhr-uni-bochum.de> wrote:

> Hello everybody,
> 
> I am rather new to softflowd so I hope my question not to be totally
> dumb.
> 
> Is it possible to capture only one subnet of netflow traffic?
> For instance: If a switch processes traffic of the subnet 10.1.x.x and
> 10.2.x.x, would it be possible to capture only traffic of 10.2.x.x ?
> 
> Actually I am using softflowd to capture netflow traffic and it would
> be best to restrict it only to one subnet directly.
> Alternatively: Is there a way to export only those netflows of a
> specific subnet (e.g. with flow-export from flowtools)?
> 
> Thanks for your help!
> Cheers
> _______________________________________________
> netflow-tools mailing list
> netflow-tools at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/netflow-tools


-- 
You get 3.5 years of bad luck if you break RAID1