Peter Haag wrote: > > > Isherwood, Jeffrey - AES wrote: > > I would like to take the output from our Netflow devices and send it > to 3 to 4 different locations to accommodate managed services > contractors, network staff, customer support and research initiatives... > > > I'm looking to collect flows from all across the enterprise, store > them and redirect them out to other people/units that have need of > them. Most equipment I've looked at has a limit of two Netflow > destinations each, so I thought that NFDUMP might be the solution. > > No - nfcapd just can forward the flows for daisy chaining the flow > traffic. To fan out to many places, have a look into > samplicator: http://freshmeat.net/projects/samplicator/ from my > colleague Simon Leinen. There is also http://www.splintered.net/sw/flow-tools/docs/flow-fanout.html I believe http://code.google.com/p/flow-tools/ is the best place to get an up to date flow-tools although I havent used them in ages (since i started using nfdump/nfsen in fact ;)
Vince > > Hop, this helps > > - Peter > > > I've begun building a CentOS box and while it is building, I have > been reading thru documentation on NFDUMP. I am at a loss to find > instructions for pushing the data off the CentOS box to other > devices. Perhaps I'm missing something? Or do I need more than > NFDUMP installed? > > > I hesitate to install NFSEN because the box needs to be locked down > tightly, and I didn't intend on running apache, I just wanted a system > to accept a large number of inbound flows from many sources and > forward them as a single stream to multiple sources. > > > Can someone point me at the right resource? > > > Thanks! > > > Jeffrey... > > > ________________________________ > > This e-mail and any files transmitted with it may be proprietary and > are intended solely for the use of the individual or entity to whom > they are addressed. If you have received this e-mail in error please > notify the sender. > > Please note that any views or opinions presented in this e-mail are > solely those of the author and do not necessarily represent those of > ITT Corporation. The recipient should check this e-mail and any > attachments for the presence of viruses. ITT accepts no liability for > any damage caused by any virus transmitted by this e-mail. > > > > > ------------------------------------------------------------------------ > > > > ------------------------------------------------------------------------------ > > This SF.Net email is sponsored by the Verizon Developer Community > > Take advantage of Verizon's best-in-class app development support > > A streamlined, 14 day to market process makes app distribution fast > and easy > > Join now and get one step closer to millions of Verizon customers > > http://p.sf.net/sfu/verizon-dev2dev > > > > ------------------------------------------------------------------------ > > > _______________________________________________ > > Nfdump-discuss mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/nfdump-discuss > ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
