Paolo, thanks for answer.

Yes I write now pmacct-to-ntopng based on pmacct-to-elasticsearch
<https://github.com/pierky/pmacct-to-elasticsearch>

And I have some problems,
first problem I need to know message header for ntopng, I reauested info
from ntopng team

the second it is for aggregation, ntopng needs some raw fields from
netflow, vlan_in, vlan_out, bytes_in, bytes_out, after pmacct agregation we
have only bytes, vlan and so on ...

I will commit script to github, but first I need to solve problem with zmq
bind ...



On Wed, Dec 9, 2015 at 4:54 PM, Paolo Lucente <[email protected]> wrote:

> Hi Vadim,
>
> Thanks for getting in touch. Was wondering the purpose of your
> feature request. Like, if you just think ZeroMQ would be a nice
> addition to the current messaging options in pmacct (RabbitMQ and
> Kafka); or if actually you want to inject data from pmacct into
> ntopng.
>
> In case of the former (nice addition) let's see if there is any
> further interest from peole reading so that i can gauge myself
> some sense of priority; in case of the latter (inject data into
> ntopng) then i'd like to ask you whether you would volunteer
> yourself to follow the same route as the pmacct-to-elasticsearch
> project (*): essentially use what is already available in pmacct
> as proof of concept; let's gather some critical mass; let's take
> it from there to see if we need a round of beautification (ie.
> build native support for ZeroMQ in pmacct). Of course, shall you
> be willing to embark into it, you can count on my full support
> throughout the journey.
>
> Cheers,
> Paolo
>
> (*) https://github.com/pierky/pmacct-to-elasticsearch
>
> On Wed, Dec 09, 2015 at 01:42:45AM +0300, ?????????? ????????????????
> wrote:
> > Hi guys,
> >
> > can you add export of flows via ZeroMQ
> >
> > ntopng uses zeromq to recieve flows from nprobe
> >
> http://www.ntop.org/nprobe/why-nprobejsonzmq-instead-of-native-sflownetflow-support-in-ntopng/
> >
> > WBR,
> > Vadim.
>
> > _______________________________________________
> > pmacct-discussion mailing list
> > http://www.pmacct.net/#mailinglists
>
>
> _______________________________________________
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists
>
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to