Hi Mike, To confirm this is correct, currently you can't. I have on the todo list for 1.7.2 (which just started) to review and further improve the NetFlow/ IPFIX replication part with features on which this dev would depend upon, ie. dissect a NetFlow packet in flows when replicating (this is already existing for sFlow which does not have the extra complexity of template management). At this point I can't commit on timelines though.
Paolo On Mon, Apr 16, 2018 at 09:58:49AM -0500, Mike Hammett wrote: > So at this time, I can't use pmacctd to take in netflow, add BGP and export a > new netflow? > > > > > ----- > Mike Hammett > Intelligent Computing Solutions > http://www.ics-il.com > > Midwest Internet Exchange > http://www.midwest-ix.com > > ----- Original Message ----- > > From: "Paolo Lucente" <pa...@pmacct.net> > To: firstname.lastname@example.org > Sent: Saturday, March 3, 2018 10:17:34 AM > Subject: Re: [pmacct-discussion] Export Netflow with BGP? > > > Hi Mike, > > If you are collecting with nfacctd, you can enrich NetFlow data once > collecting (not replicating); then you can export to 3rd party elements > via files (print plugin) or Kafka/RabbitMQ. Enrichment of BGP data at > the replicator is not supported and i doubt it will be in future since > it is easier only for NetFlow v5 whereas it is rather tricky with v9 and > IPFIX as it requires inserting TLVs in both template and data packets. > > Paolo > > On Sat, Mar 03, 2018 at 09:52:47AM -0600, Mike Hammett wrote: > > My routers (Mikrotik) don't export the ASN information with the netflow > > data. It looks like the tee plugin can send netflow on to another device. > > However, it does NOT look like I can use pmacct's ability to join netflow > > with BGP and then export that as netflow. Correct? > > > > > > > > > > ----- > > Mike Hammett > > Intelligent Computing Solutions > > http://www.ics-il.com > > > > Midwest Internet Exchange > > http://www.midwest-ix.com > > > > > _______________________________________________ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists