[netflow-tools] Simple netflow probe for linux

Koteswar koti.kelam at gmail.com
Mon Aug 24 14:56:57 EST 2009


Hi
In sofflowd, If I select track level as "ip" (softflowd -T ip) then it is
filling other fields like protocol, src port, dst port, tcp flags to 0 and
sending data flow set. But this is not correct behavior. It should not add
these fields to data flow set or template flow set so that we can reduce
exported flow data volume and network load (RFC3957).
Please clarify if I am wrong?
Regards
Koteswar

On Thu, Jul 9, 2009 at 1:20 PM, Damien Miller <djm at mindrot.org> wrote:

> On Wed, 8 Jul 2009, Koteswar - Pandu wrote:
>
> > Hi all
> >
> > I want a simple netflow probe in linux which will export v5 and v9
> > flows to the collector. Any daemon is available for this or kernel can
> > be patched to do this??
>
> Well this list partially exists to support softflowd:
>
> http://www.mindrot.org/projects/softflowd/
>
> Softflowd is a software netflow probe that supports v5, v9 and IPv6.
>
> -d
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mindrot.org/pipermail/netflow-tools/attachments/20090824/325af145/attachment-0001.html>


More information about the netflow-tools mailing list