[netflow-tools] [softflowd] Capture only one subnet

Damien Miller djm at mindrot.org
Thu Jan 24 16:17:04 EST 2013


On Sat, 18 Jan 2013, Thomas Hupperich wrote:

> softflowd -i eth1 -v5 -n 127.0.0.1:10555 net 10.10.2.0/24
> 
> At port 10555 on localhost there is a capture script running and
> 10.10.2.x is the subnet I want softflowd to capture.
> eth1 is the interface to capture (in promisc mode).
> 
> When I now execute the command "softflowctl dump-flows" there are flows
> listed on the console which are not from the specified subnet.

I think

"src net 10.10.2.0/24 and dst net 10.10.2.0/24"

is what you want


More information about the netflow-tools mailing list