I have a setup where a load balancer is sending sessions to multiple devices that produce netflows. Each device is seeing unique traffic.
I was planning to have each device send to a separate nfcapd process listening on a different port on a single collector box. However, that makes searching through flows more of a hassle. Are there any potential problems with having each device send to the same nfcapd process, listening on one port. It would basically be recombining what the load balancer split up. I can't see any problems but wanted some feedback before I implement it this way. I'd hate to find out later it caused me to lose flows somehow. Thanks, Kieran ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Nfdump-discuss mailing list Nfdump-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
