On Sun, 2 Mar 2014, Hrvoje Popovski wrote: SNIP
Or you could export sflow (i know it's not ipfix) from switch directly to nfdump.
my US$.02 from collecting flow data for years. nfdump does not have native support for sflow, it takes the sampled sflow data and do a best effort to convert to netflow. We have seen discrepancies between data collected via sfcapd vs data collected by Inmon Traffic Sentinel. The folks at Inmon wrote the sflow RFC so I'm pretty sure their tool represents the actual data correctly. g.day diana
