[netflow-tools] [softflowd] Capture only one subnet
djm at mindrot.org
Thu Jan 24 16:17:04 EST 2013
On Sat, 18 Jan 2013, Thomas Hupperich wrote:
> softflowd -i eth1 -v5 -n 127.0.0.1:10555 net 10.10.2.0/24
> At port 10555 on localhost there is a capture script running and
> 10.10.2.x is the subnet I want softflowd to capture.
> eth1 is the interface to capture (in promisc mode).
> When I now execute the command "softflowctl dump-flows" there are flows
> listed on the console which are not from the specified subnet.
"src net 10.10.2.0/24 and dst net 10.10.2.0/24"
is what you want
More information about the netflow-tools