That's bad news for me, but I understand the motivations. sFlow -> NetFlow conversion seems readily available using sflowtool, but I'm not having the same success in finding a tool that does NetFlow -> sFlow conversion. I was hoping to do output to snort (as was mentioned by Brent van Dussen in your "Traffic Accounting" panel at NANOG 56), however, I'm unsure of how to get NetFlow data from pmacct exported to snort without the use of sflowtools tcpdump output. I'd be open to any ideas you might have. :)
Thanks, Brian On Fri, Oct 26, 2012 at 7:25 PM, Paolo Lucente <[email protected]> wrote: > Hi Brian, > > The feature to convert between NetFlow and sFlow and vice-versa > was removed from the code almost 1.5 years ago due to nearly null > interest from the community. The implementation was working but > basic and hence, instead of spending time to rewrite it properly, > i decided to remove it and focus the software on other features. > The presentation you mention is >= 5 years old insead. > > Cheers, > Paolo > > On Wed, Oct 24, 2012 at 01:08:15AM -0500, Brian Talley wrote: > > The presentation at the link below says that you can use pmacct to > "convert > > data between the two protocols". I have multiple netflow agents on the > > network and only a single sflow agent, so I was thinking of using a > > "pre-processor" to convert the incoming sflow data to netflow and > redirect > > the netflow output back to the normal netflow collector. How might I go > > about that? > > > > http://www.pmacct.net/p_lucente_inex.pdf > > > > Thanks, > > Brian > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > -- Brian Talley [email protected]
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
