Please note that for template based Netflow versions the destinations need them to process data flowsets. Using the samplicator not all destinations get all sent template flowsets - it will take some time and re-sending of these template flowsets till all destinations received them and understand the data flowsets.
Regards, Mario From: pmacct-discussion [mailto:pmacct-discussion-boun...@pmacct.net] On Behalf Of Jordan Grigorov (Neterra NMT) Sent: Wednesday, February 10, 2016 10:35 AM To: pmacct-discussion@pmacct.net Subject: Re: [pmacct-discussion] Question about teeing and sampling Hello Pau, You can try samplicate tool (https://github.com/sleinen/samplicator) to forward netflow data to multiple IPs/ports. Just install it and issue: samplicate -s 88.22.33.99 -p 9996 127.0.0.1/9995 127.0.0.1/9999 -f Best Regards, --- Jordan On 8.02.2016 16:27, KA PDE wrote: Hi all, I've recently discovered pmacct and I'm evaluating it to forward netflow data for security purposes to a set of collectors, some of them requiring less amount of data sent. I have a simple configuration using the tee plugin. I've managed to send flow information to NFsen but I'm unable to find a way of sampling to the other destination.Is this achievable with pmacct? ! nfacctd configuration ! ! ! daemonize: true pidfile: /var/run/nfacctd.pid syslog: daemon nfacctd_port: 9996 nfacctd_ip: 88.22.33.99 plugin_pipe_size: 10240000 plugin_buffer_size: 10240 plugins: tee[nfsen], tee[pmacct] tee_receiver[nfsen]: 127.0.0.1:9995<http://127.0.0.1:9995> tee_receiver[pmacct]: 127.0.0.1:9999<http://127.0.0.1:9999> ! sampling_rate[pmacct]: 4096 tee_transparent: true Thanks in advance and best regards, Pau _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
