That's pretty vague. The info you're asking about is not exported via netflow, so you'll need some other process (i.e. ETLs, or stream processing if your pipeline's resources can handle it) to retrieve/match the additional data to your flow records - e.g. reverse DNS and mining aggregated HTTP server logs using the fields you're exporting to match server transactions with flows.
On Mon, Feb 19, 2018 at 9:26 PM, sadan sohan <[email protected]> wrote: > Hi, > > We have a use case to fetch the DNS domain and the HTTP destination > requested by the incoming packets from the source host. Can somebody help > here ? > > Thanks & Regards, > Sadan > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists >
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
