[netflow-tools] Softflowd - 802.1q and IPFIX

[Chris Jones]

Hi Hitoshi,

Thank you for providing these changes. Using your changes I'm now able
to use softflowd to capture both tagged and untagged network traffic
from our switch's mirror port and export in IPFIX format to a collector
server running NfSen (1.3.6p1) / NFDUMP (1.6.10). So far all seems to be
working well.

Cheers,
-Chris

> Hitoshi Irino <mailto:irino at sfc.wide.ad.jp>
> March 21, 2014 at 1:44 AM
> Hello Chris,
>
> I committed changes for supporting vlan.
> https://code.google.com/p/softflowd/source/detail?r=80aac3b2fec35c7c286d83c76ba8b9024bdae9df
>
>
> Please check out the source code and compile to use vlan enabled
> softflowd.
>
> If you want to use vlanid on NetFlow v9,
> please use configure option "./configure --enable-nf9-vlan" before
> "make".
> And please use "softflowd -T vlan" (tracking level:vlan) option when
> you use softflowd.
>
> If you want to use vlanid on IPFIX,
> Just use "softflowd -T vlan". (It doesn't need "./configure
> --enable-nf9-vlan".)
>
> regards,
> Hitoshi
>
>
> Chris Jones <mailto:cjones at autonomic.ca>
> March 8, 2014 at 3:49 PM
> Good afternoon folks,
>
> Curious if softflowd has support for 802.1q(or future plans for it)?
> For all our firewall interfaces I would like to use port mirroring on
> our Brocade ICX switches to a probe system running OpenBSD 5.4 and
> softflowd. Our firewalls (Juniper SRX) have an unfortunate limitation
> when exporting J-Flow when operating in an HA chassis cluster
> configuration, so I have to resort to using port mirroring for this
> purpose.
>
> Also, I can see some commits from Hitoshi Irino for IPFIX support. Just
> wondering if this is considered stable enough for use in production or
> if I should stick to NetFlow v9. I plan to use NfSen/NFDUMP as a
> collector.
>
> Thanks in advance for your feedback.
>
> Cheers,
> -Chris
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20140402/e416fa55/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: compose-unknown-contact.jpg
Type: image/jpeg
Size: 770 bytes
Desc: not available
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20140402/e416fa55/attachment-0001.jpg>