Hi Ian
On 9/9/10 3:10 AM, Ian B wrote:
> We currently use flow-tools to capture netflow data (v5) and a custom app
> written in C which utilises the flow-tools library to read the netflow file
> flow-by-flow, tally up the bytes downloaded per customer IP address (or
> subnet), and update an SQL database with the aggregate results.
>
> I've wondering if others are doing a similar thing and how they achieve this
> using nfdump tools.
>
> The reason I ask is that we're looking at how we can do similar accounting on
> ipv6 traffic. AFAIK netflow v9 is required, and as flow-tools doesn't support
> that, I'm thinking that nfdump may be an alternative.
Yes - nfdump supports almost complete netflow v9. nfdump may do half way you
are looking for: You can create very easily
a statistic about IP addresses and/or subnets in one go. However you would sill
need to feed your SQL DB somehow by post
processing the output. You may use some simple perl scripts and nfdump csv
format or parse the text output.
Hope, this helps
- Peter
>
> Thanks,
> Ian.
>
>
>
>
>
>
>
>
> ------------------------------------------------------------------------------
> This SF.net Dev2Dev email is sponsored by:
>
> Show off your parallel programming skills.
> Enter the Intel(R) Threading Challenge 2010.
> http://p.sf.net/sfu/intel-thread-sfd
> _______________________________________________
> Nfdump-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
--
Be nice to your netflow data. Use NfSen and nfdump :)
------------------------------------------------------------------------------
This SF.net Dev2Dev email is sponsored by:
Show off your parallel programming skills.
Enter the Intel(R) Threading Challenge 2010.
http://p.sf.net/sfu/intel-thread-sfd
_______________________________________________
Nfdump-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
