Hello, We are deploying several netflow servers, with one of them forwarding some netflow records to others.
I have set up separate channels for each data source in order to avoid confusion, but the forwarding has made the searches by "router-ip" useless. Imagine that routers R1 and R2 send the netflow records to server S1, which forwards them to S2. If I examine the flows from R1 and R2 in S2, the "router-ip" value I see for the flows is the IP address of S1, instead of the IP addresses of R1 and R2, which would be more than desirable. What about adding a "force router-ip" parameter to nfcapd? That parameter would make nfcapd change the router-ip for all the flows going through it. Right now, I have separate nfcapd processes for R1 and R2 both in S1 and S2, so a simple parameter would solve it. I am sure others have stumbled upon the same problem. Cheers, Borja. ------------------------------------------------------------------------------ _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
