>>
>> I just updated the team leader for this research project, and he asked
>> me to verify that if the raw netflow data is coming in from multiple
>> sources (like 200 or so) all inbound on the same port (9996) that the
>> nfcapd will capture it all, the samplicator can then forward it to 2
>> reseach labs and a managed services contractor (to do with what they
>> all will). Will Samplicator replicate and forward the nfcapd data with
>> our altering it?
>
You need to have samplicator or flow-fanout receive the flows, then
duplicate them to nfcapd and etc.
I've have problems with both samplicator and flow-fanout dropping flows on
the installation I had so I recommend you run some tests so you know what
the limitations are on your platform(s). It will take awhile but may save
you from a considerable headache later!
-Russell Dwarshuis
------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
