Nice point here, Mario. Thanks for your insight. Best regards,
Pau 2016-02-10 12:28 GMT+01:00 Jentsch, Mario <[email protected]>: > Please note that for template based Netflow versions the destinations need > them to process data flowsets. Using the samplicator not all destinations > get all sent template flowsets – it will take some time and re-sending of > these template flowsets till all destinations received them and understand > the data flowsets. > > > > Regards, > > Mario > > > > *From:* pmacct-discussion [mailto:[email protected]] *On > Behalf Of *Jordan Grigorov (Neterra NMT) > *Sent:* Wednesday, February 10, 2016 10:35 AM > *To:* [email protected] > *Subject:* Re: [pmacct-discussion] Question about teeing and sampling > > > > Hello Pau, > > You can try *samplicate* tool (https://github.com/sleinen/samplicator) to > forward netflow data to multiple IPs/ports. > > Just install it and issue: > > *samplicate -s 88.22.33.99 -p 9996 127.0.0.1/9995 <http://127.0.0.1/9995> > 127.0.0.1/9999 <http://127.0.0.1/9999> -f* > > Best Regards, > > > --- > Jordan > > > > On 8.02.2016 16:27, KA PDE wrote: > > Hi all, > > > > I've recently discovered pmacct and I'm evaluating it to forward netflow > data for security purposes to a set of collectors, some of them requiring > less amount of data sent. > > > > I have a simple configuration using the tee plugin. I've managed to send > flow information to NFsen but I'm unable to find a way of sampling to the > other destination.Is this achievable with pmacct? > > > > ! nfacctd configuration > > ! > > ! > > ! > > daemonize: true > > pidfile: /var/run/nfacctd.pid > > syslog: daemon > > > > nfacctd_port: 9996 > > nfacctd_ip: 88.22.33.99 > > plugin_pipe_size: 10240000 > > plugin_buffer_size: 10240 > > > > plugins: tee[nfsen], tee[pmacct] > > tee_receiver[nfsen]: 127.0.0.1:9995 > > tee_receiver[pmacct]: 127.0.0.1:9999 > > ! sampling_rate[pmacct]: 4096 > > tee_transparent: true > > > > Thanks in advance and best regards, > > > > Pau > > > > > _______________________________________________ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists >
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
