From cjones at autonomic.ca Sun Mar 9 10:49:35 2014 From: cjones at autonomic.ca (Chris Jones) Date: Sat, 08 Mar 2014 15:49:35 -0800 Subject: [netflow-tools] Softflowd - 802.1q and IPFIX Message-ID: <531BAC8F.4090209@autonomic.ca> Good afternoon folks, Curious if softflowd has support for 802.1q(or future plans for it)? For all our firewall interfaces I would like to use port mirroring on our Brocade ICX switches to a probe system running OpenBSD 5.4 and softflowd. Our firewalls (Juniper SRX) have an unfortunate limitation when exporting J-Flow when operating in an HA chassis cluster configuration, so I have to resort to using port mirroring for this purpose. Also, I can see some commits from Hitoshi Irino for IPFIX support. Just wondering if this is considered stable enough for use in production or if I should stick to NetFlow v9. I plan to use NfSen/NFDUMP as a collector. Thanks in advance for your feedback. Cheers, -Chris From irino at sfc.wide.ad.jp Fri Mar 21 19:44:58 2014 From: irino at sfc.wide.ad.jp (Hitoshi Irino) Date: Fri, 21 Mar 2014 17:44:58 +0900 Subject: [netflow-tools] Softflowd - 802.1q and IPFIX In-Reply-To: <531BAC8F.4090209@autonomic.ca> References: <531BAC8F.4090209@autonomic.ca> Message-ID: <532BFC0A.90906@sfc.wide.ad.jp> Hello Chris, I committed changes for supporting vlan. https://code.google.com/p/softflowd/source/detail?r=80aac3b2fec35c7c286d83c76ba8b9024bdae9df Please check out the source code and compile to use vlan enabled softflowd. If you want to use vlanid on NetFlow v9, please use configure option "./configure --enable-nf9-vlan" before "make". And please use "softflowd -T vlan" (tracking level:vlan) option when you use softflowd. If you want to use vlanid on IPFIX, Just use "softflowd -T vlan". (It doesn't need "./configure --enable-nf9-vlan".) regards, Hitoshi (2014/03/09 8:49), Chris Jones wrote: > Good afternoon folks, > > Curious if softflowd has support for 802.1q(or future plans for it)? > For all our firewall interfaces I would like to use port mirroring on > our Brocade ICX switches to a probe system running OpenBSD 5.4 and > softflowd. Our firewalls (Juniper SRX) have an unfortunate limitation > when exporting J-Flow when operating in an HA chassis cluster > configuration, so I have to resort to using port mirroring for this purpose. > > Also, I can see some commits from Hitoshi Irino for IPFIX support. Just > wondering if this is considered stable enough for use in production or > if I should stick to NetFlow v9. I plan to use NfSen/NFDUMP as a collector. > > Thanks in advance for your feedback. > > Cheers, > -Chris > > _______________________________________________ > netflow-tools mailing list > netflow-tools at mindrot.org > https://lists.mindrot.org/mailman/listinfo/netflow-tools > From cjones at autonomic.ca Sat Mar 22 01:14:29 2014 From: cjones at autonomic.ca (Chris Jones) Date: Fri, 21 Mar 2014 07:14:29 -0700 Subject: [netflow-tools] Softflowd - 802.1q and IPFIX In-Reply-To: <532BFC0A.90906@sfc.wide.ad.jp> References: <531BAC8F.4090209@autonomic.ca> <532BFC0A.90906@sfc.wide.ad.jp> Message-ID: <5928987326739718804@unknownmsgid> Thank you Hitoshi. I look forward to testing this out. I'll provide some feedback with my results. Cheers, -Chris Sent from my mobile > On Mar 21, 2014, at 1:44 AM, Hitoshi Irino wrote: > > Hello Chris, > > I committed changes for supporting vlan. > https://code.google.com/p/softflowd/source/detail?r=80aac3b2fec35c7c286d83c76ba8b9024bdae9df > > Please check out the source code and compile to use vlan enabled softflowd. > > If you want to use vlanid on NetFlow v9, > please use configure option "./configure --enable-nf9-vlan" before "make". > And please use "softflowd -T vlan" (tracking level:vlan) option when you use softflowd. > > If you want to use vlanid on IPFIX, > Just use "softflowd -T vlan". (It doesn't need "./configure --enable-nf9-vlan".) > > regards, > Hitoshi > > (2014/03/09 8:49), Chris Jones wrote: >> Good afternoon folks, >> >> Curious if softflowd has support for 802.1q(or future plans for it)? >> For all our firewall interfaces I would like to use port mirroring on >> our Brocade ICX switches to a probe system running OpenBSD 5.4 and >> softflowd. Our firewalls (Juniper SRX) have an unfortunate limitation >> when exporting J-Flow when operating in an HA chassis cluster >> configuration, so I have to resort to using port mirroring for this purpose. >> >> Also, I can see some commits from Hitoshi Irino for IPFIX support. Just >> wondering if this is considered stable enough for use in production or >> if I should stick to NetFlow v9. I plan to use NfSen/NFDUMP as a collector. >> >> Thanks in advance for your feedback. >> >> Cheers, >> -Chris >> >> _______________________________________________ >> netflow-tools mailing list >> netflow-tools at mindrot.org >> https://lists.mindrot.org/mailman/listinfo/netflow-tools >>