Thanks. My COTS vendor will do the forwarding, but at an additional cost. The fanout component seemed simple enough that I hoped I could offload it to a VM running open-source software. Sounds like flow-tools aren't the way to go for this requirement. Thanks for the pointer to samplicator. I also received private email suggesting CMU's "SiLK".
- Morty On Mon, Oct 17, 2011 at 03:54:10PM -0500, Craig Weinhold wrote: > flow-fanout does manipulate the packets, which is why you must specify the > output PDU version. It won't work with V9/IPFIX. > > For open source, use samplicator which truly is packet agnostic. > > Many commercial packages also have their own UDP forwarding feature. E.g., > NetScout forwards v5 and v9 just fine. > > -Craig > > > On Mon, 17 Oct 2011, Morty wrote: > > > I'm looking to fanout/replicate some netflow data. Right now we have > > no v9 or IPFIX, so flow-fanout would work great. But we're looking > > near-term to do v9 and/or IPFIX. I know the current flow-tools > > doesn't support v9 or IPFIX, so we already bought a COTS product to > > accomodate the future v9/IPFIX requirement. Question: since > > flow-fanout is just replicating netflow packets, should even old > > versions work with v9/IPFIX? Or do we need to buy a COTS product for > > that, too? > > > > Thanks! > > > > - Morty > > _______________________________________________ > > Flow-tools mailing list > > [email protected] > > http://mailman.splintered.net/mailman/listinfo/flow-tools > > -- Mordechai T. Abzug Linux red-sonja 2.6.32-33-generic #72-Ubuntu SMP Fri Jul 29 21:07:13 UTC 2011 x86_64 GNU/Linux 1st rule of intelligent tinkering - save all the parts _______________________________________________ Flow-tools mailing list [email protected] http://mailman.splintered.net/mailman/listinfo/flow-tools
