Hi Moo,
Unfortunately you are falling in the very same use-case of that message
but using sFlow instead of NetFlow/IPFIX. Like you said, the first 3 can
be done out of the box but - once sFlow is unpacked, you can't re-pack
it with the additional info, ie. ASN information.
This is mainly because of UDP, ie. adding extra info takes more space
and you may exceed MTU, and trying to break one single message in
multiple ones would screw up any original sequence numbers. In essence
several corner cases have to be taken into account for the feature in
order to work correctly and there is not enough traction / demand for me
to invest time into it and put it on the roadmap. Of course, needless to
say, any such contribution would be more than welcome.
Paolo
On 30/12/2020 13:25, mooli...@ik.me wrote:
Hello,
I would like to know if the following config is possible:
1. receive ipv4 and ipv6 sflow samples sent from a Juniper MX router
2. lookup ASN info via bgp_daemon thread
3. aggregate on etype,src_as,dst_as,peer_src_as,peer_dst_as
4. export aggregated stats to another sflow collector (as-stats)
1,2 and 3 works
but I don't see a way to do 4
nfprobe is only available for pmacctd
tee is just replicating stats
a similar question was asked in an old post :
https://www.mail-archive.com/pmacct-discussion@pmacct.net/msg03675.html
but Paolo said at that timeit wasn't possible at that time.
is there another way to create aggregated sflow packets from nfacctd's stats?
Thanks,
Moo
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
