On Mon, Jan 24, 2011 at 10:43:36PM +0100, Patrick Lamaiziere wrote: > Hello, > > Are there some plans to implement netflow v9 in pflow(4) (to be able to > trace ipv6 flows)? > > Without, which collector can I use in userland? And is the load > introduced by such userland tool a concern with a network traffic > passing the firewall around ~500Mb/s?
Softflowd. http://www.mindrot.org/projects/softflowd/ I believe it will handle the load -- I put 50Mbs through a PF machine several years ago, and softflowd didn't crack 1% CPU. YMMV. ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ [email protected], Twitter @mwlauthor
