I found a solution to send the expoter_ipv4_address that include the
original source but I hit a bug as the ip address is reverse (If the sflow
exporter is the expoter_ipv4_address is )



On Mon, Oct 17, 2016 at 4:12 PM, Nitzan Tzelniker <
nitzan.tzelni...@gmail.com> wrote:

> Hi,
> I am using nprobe to convert from sflow to netflow v9 and send it to
> logstash.
> I am facing a problem with the fact that logstash see all flows from
> and I cant identify the source host for the sflow data.
> I know I can run multiple nprobe process with diffarent ports but I dont
> want to go this way.
> Is there any way to export the flows with a spoofed source IP of the sflow
> source or add a field that include the source host
> Thanks
> Nitzan
Ntop-misc mailing list

Reply via email to