From cjones at autonomic.ca Thu Apr 3 15:11:57 2014 From: cjones at autonomic.ca (Chris Jones) Date: Wed, 02 Apr 2014 21:11:57 -0700 Subject: [netflow-tools] Softflowd - 802.1q and IPFIX In-Reply-To: <532BFC0A.90906@sfc.wide.ad.jp> References: <531BAC8F.4090209@autonomic.ca> <532BFC0A.90906@sfc.wide.ad.jp> Message-ID: <533CDF8D.70501@autonomic.ca> Hi Hitoshi, Thank you for providing these changes. Using your changes I'm now able to use softflowd to capture both tagged and untagged network traffic from our switch's mirror port and export in IPFIX format to a collector server running NfSen (1.3.6p1) / NFDUMP (1.6.10). So far all seems to be working well. Cheers, -Chris > Hitoshi Irino > March 21, 2014 at 1:44 AM > Hello Chris, > > I committed changes for supporting vlan. > https://code.google.com/p/softflowd/source/detail?r=80aac3b2fec35c7c286d83c76ba8b9024bdae9df > > > Please check out the source code and compile to use vlan enabled > softflowd. > > If you want to use vlanid on NetFlow v9, > please use configure option "./configure --enable-nf9-vlan" before > "make". > And please use "softflowd -T vlan" (tracking level:vlan) option when > you use softflowd. > > If you want to use vlanid on IPFIX, > Just use "softflowd -T vlan". (It doesn't need "./configure > --enable-nf9-vlan".) > > regards, > Hitoshi > > > Chris Jones > March 8, 2014 at 3:49 PM > Good afternoon folks, > > Curious if softflowd has support for 802.1q(or future plans for it)? > For all our firewall interfaces I would like to use port mirroring on > our Brocade ICX switches to a probe system running OpenBSD 5.4 and > softflowd. Our firewalls (Juniper SRX) have an unfortunate limitation > when exporting J-Flow when operating in an HA chassis cluster > configuration, so I have to resort to using port mirroring for this > purpose. > > Also, I can see some commits from Hitoshi Irino for IPFIX support. Just > wondering if this is considered stable enough for use in production or > if I should stick to NetFlow v9. I plan to use NfSen/NFDUMP as a > collector. > > Thanks in advance for your feedback. > > Cheers, > -Chris > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: compose-unknown-contact.jpg Type: image/jpeg Size: 770 bytes Desc: not available URL: