Hi,
Thanks for clarifying. I guess I was oversimplifying due to lack of
knowledge on the matter.
I will remember this just in case. As we will be sending to a team used to
process sFlow from Juniper MXs and we export both from a mixture of Cisco
devices with different Netflow versions.
Best
cussion-boun...@pmacct.net] *On
> Behalf Of *Jordan Grigorov (Neterra NMT)
> *Sent:* Wednesday, February 10, 2016 10:35 AM
> *To:* pmacct-discussion@pmacct.net
> *Subject:* Re: [pmacct-discussion] Question about teeing and sampling
>
>
>
> Hello Pau,
>
> You can try *sa
Hi Pau,
On the sampling part: this is not supported but for a good reason, i
would say. Sampling is, yes, about sending less data over but also
about being able to renormalize data using some math; sampling packets
passing via an interface makes sense; dropping some well-formed NetFlow
packets
t] On
> Behalf Of KA PDE
> Sent: Monday, February 08, 2016 3:28 PM
> To: pmacct-discussion@pmacct.net
> Subject: [pmacct-discussion] Question about teeing and sampling
>
> Hi all,
>
> I've recently discovered pmacct and I'm evaluating it to forward netflow data
> for securi
Hello Pau,
You can try /samplicate/ tool (https://github.com/sleinen/samplicator)
to forward netflow data to multiple IPs/ports.
Just install it and issue:
/samplicate -s 88.22.33.99 -p 9996 127.0.0.1/9995 ///127.0.0.1// -f/
Best Regards,
---
Jordan
and understand the data
flowsets.
Regards,
Mario
From: pmacct-discussion [mailto:pmacct-discussion-boun...@pmacct.net] On Behalf
Of Jordan Grigorov (Neterra NMT)
Sent: Wednesday, February 10, 2016 10:35 AM
To: pmacct-discussion@pmacct.net
Subject: Re: [pmacct-discussion] Question about teeing and sampling
No problem with tee here - but wasn't Pau expecting tee to do further
sampling (which it doesn't)?
==nfacctd_tee.conf:
pidfile: /pmacct/var/nfacctd_tee.pid
logfile: /pmacct/log/nfacctd_tee.log
daemonize: true
files_umask: 2
nfacctd_disable_checks: true
nfacctd_pipe_size: 8388608
: Monday, February 08, 2016 3:28 PM
To: pmacct-discussion@pmacct.net
Subject: [pmacct-discussion] Question about teeing and sampling
Hi all,
I've recently discovered pmacct and I'm evaluating it to forward netflow data
for security purposes to a set of collectors, some of them requiring less
amount
Hi all,
I've recently discovered pmacct and I'm evaluating it to forward netflow
data for security purposes to a set of collectors, some of them requiring
less amount of data sent.
I have a simple configuration using the tee plugin. I've managed to send
flow information to NFsen but I'm unable
