Hi Emanuel,
I think you are looking for (i admit, non-intuitive) 'peer_src_ip'
primitive:
$ nfacctd -a | grep peer_src_ip
peer_src_ip : IP address or identificator of telemetry
exporting device
Without the grep you can see all supported primitives by the nfacctd
release
Hi,
Let me confirm that collecting the ICMP type is partially supported; the
native dst_port primitive is locked to UDP and TCP only - making this
not suitable for NetFlow v5 kind of scenarios; but if using NetFlow v9
and/or IPFIX you could define your own custom primitive via the
Hi Paolo,
Sorry, I should have said I was
replacing the netflow *generators*, not collectors. My mistake!
Yes, I posted the config that generates
the netflow 9 flows, since I hoped to see if it was missing
something for including
Thank you for your help. Appreciate it !
See, I did use it for testing after I sent this email. However, the ip
showed there was the IP from my nfacctd machine, the collector itself. Not
the exporter.
peer_src_ip : IP address or identificator of telemetry
exporting device