Hello Pau,
You can try /samplicate/ tool (https://github.com/sleinen/samplicator)
to forward netflow data to multiple IPs/ports.
Just install it and issue:
/samplicate -s 88.22.33.99 -p 9996 127.0.0.1/9995 ///127.0.0.1//9999 -f/
Best Regards,
---
Jordan
<https://www.linkedin.com/company/neterra>
On 8.02.2016 16:27, KA PDE wrote:
Hi all,
I've recently discovered pmacct and I'm evaluating it to forward
netflow data for security purposes to a set of collectors, some of
them requiring less amount of data sent.
I have a simple configuration using the tee plugin. I've managed to
send flow information to NFsen but I'm unable to find a way of
sampling to the other destination.Is this achievable with pmacct?
! nfacctd configuration
!
!
!
daemonize: true
pidfile: /var/run/nfacctd.pid
syslog: daemon
nfacctd_port: 9996
nfacctd_ip: 88.22.33.99
plugin_pipe_size: 10240000
plugin_buffer_size: 10240
plugins: tee[nfsen], tee[pmacct]
tee_receiver[nfsen]: 127.0.0.1:9995 <http://127.0.0.1:9995>
tee_receiver[pmacct]: 127.0.0.1:9999 <http://127.0.0.1:9999>
! sampling_rate[pmacct]: 4096
tee_transparent: true
Thanks in advance and best regards,
Pau
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists