Gleb Smirnoff wrote:
On Wed, Sep 08, 2004 at 10:43:34AM +0000, [EMAIL PROTECTED] wrote:
P> > here is netgraph module which implements Netflow traffic
P> >accounting, which I'm going to add to CURRENT in recent future:
P> >[..]
P> >I've been testing it for last week on loaded 100Mbit Ethernet
P> >which serves 9 ASes, 12 prefixes :) And it works stable.
P> P> Did some tests here, looks very nice ! At least our netflow-collector
P> is happy with the data ;-)
The only empty fields are ASNs :) I hope to fill them in future.
P> flowctl did not work for me, to which P> node do you have to send the msg to ?
I usually call node "netflow" using 'ngctl name', and then call 'flowctl netflow show'.
P> I attached two netflow nodes on a tee, one right2left and one left2right P> to catch both directions.
This is working solution, but not correct. :) To catch both directions you should feed ng_netflow with incoming traffic from all interfaces.
using 'tee' means you are duplicating all packets.
shouldn't you do collection "inline? or does this NEED to have copies of the packets?
_______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"