Re: [pmacct-discussion] Capture DNS domain and HTTP destinations from incoming netflow packets

[Aaron Finney]

That's pretty vague. The info you're asking about is not exported via
netflow, so you'll need some other process (i.e. ETLs, or stream processing
if your pipeline's resources can handle it) to retrieve/match the
additional data to your flow records - e.g. reverse DNS and mining
aggregated HTTP server logs using the fields you're exporting to match
server transactions with flows.


On Mon, Feb 19, 2018 at 9:26 PM, sadan sohan  wrote:

> Hi,
>
> We have a use case to fetch the DNS domain and the HTTP destination
> requested by the incoming packets from the source host. Can somebody help
> here ?
>
> Thanks & Regards,
> Sadan
>
> ___
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists
>
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

[pmacct-discussion] Capture DNS domain and HTTP destinations from incoming netflow packets

[sadan sohan]

Hi,

We have a use case to fetch the DNS domain and the HTTP destination
requested by the incoming packets from the source host. Can somebody help
here ?

Thanks & Regards,
Sadan
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists