Hmmmm.... if it is IPFIX then it should work with NeTraMet ? Auckland is the home of NeTraMet ;) and I already run it on our resnet where we are using packetfence.
Russell. On 30/06/2010, at 2:54 AM, Olivier Bilodeau wrote: > Hi! > > Just a quick shout out to say that we have new stuff for the brave > people to try out! > > In the last few days, weeks I have been working on integrating netflow / > IPFIX analysis into packetfence (in a separate daemon). > > The work is in the branch: > http://mtn.inverse.ca/branch/changes/org.packetfence.feature.netflow > > Here's how to try it out: > -- DON'T DO ANY OF THIS ON A PRODUCTION SERVER -- > This is based on what will become packetfence 1.10.0 so it will surely > wreak havoc on a production system if not properly upgraded (schema > change, radius interface change, etc.). > > Checkout head and run pfnetflowd. > > For now, netflow needs to be v9 with mac-address info included. On a > cisco 1811 we did: > > ! globally > ip flow-capture mac-addresses > ip flow-export source FastEthernet0/0 > ip flow-export version 9 > ip flow-export destination <collector> 4739 > ! on each interesting interface vlan (facing the LAN) > ip flow ingress > > Edit conf/netflow.conf with rules. Keep in mind that nodes need to be > categorized and that only rules matching the node category will be > processed for a given flow. > > Remaining tasks before merging into trunk are listed in the > feature.netflow-TODO file. Feel free to provide help on any of these. > > Again, this is all very rough, lacking documentation but I'm afraid I > won't be able to write it for now BUT it'll come though. Just making > sure you know what you are getting into ;) > > By the way, 1.9.0 should be released pretty soon! > > -- > Olivier Bilodeau > obilod...@inverse.ca :: +1.514.447.4918 *115 :: www.inverse.ca > Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence > (www.packetfence.org) > > ------------------------------------------------------------------------------ > This SF.net email is sponsored by Sprint > What will you do first with EVO, the first 4G phone? > Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first > _______________________________________________ > Packetfence-devel mailing list > Packetfence-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-devel ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first _______________________________________________ Packetfence-devel mailing list Packetfence-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-devel
