Re: [swinog] sflow proxy/multiplexer
Hey Ju Any suggestions are welcome - preferably opensource :) I would think about something along these lines... UDP Samplicator: http://freecode.com/projects/samplicator Lancope Flow Replicator (commercial): http://www.lancope.com/products/stealthwatch-system/flowreplicator/ Flow Fanout (NetFlow only, but maybe simple to modify): http://www.splintered.net/sw/flow-tools/docs/flow-fanout.html Or build your own solution with Elisa Jasinska Net::sFlow-Module: http://search.cpan.org/~elisa/Net-sFlow-0.04X/sFlow.pm -- Best regards, Roman Hochuli Operations Manager nexellent ag Saegereistrasse 33 CH-8152 Glattbrugg Phone: +41 44 872 20 00 Fax: +41 44 872 20 01 URL: www.nexellent.ch X-NCC-RegID: ch.nexellent Imagination is the one weapon in the war against reality. -- Jules de Gaultier ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] sflow proxy/multiplexer
Hallo zusammen, Wir haben mal eine Java Sflow Library http://jsflow.sourceforge.netgeschrieben für solche Zwecke. Mit der Library kann man Sflow weiterleiten und auch umschreiben. HTH Thomas On Jun 17, 2013 8:59 PM, Julian Rutz m...@jurutz.com wrote: Hi there, Maybe some of you folks can give me a hint on this... I do have a linux box which is receiving sflow data from routers/switches/etc. I want this box to forward the sflow data to two or three other hosts. So I am looking for a decent sflow proxy/multiplexer. Any suggestions are welcome - preferably opensource :) Thanks in advance. Cheers, Julian ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] sflow proxy/multiplexer
Hi there, Maybe some of you folks can give me a hint on this... I do have a linux box which is receiving sflow data from routers/switches/etc. I want this box to forward the sflow data to two or three other hosts. So I am looking for a decent sflow proxy/multiplexer. Any suggestions are welcome - preferably opensource :) Thanks in advance. Cheers, Julian ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] sflow proxy/multiplexer
should be quite easy to solve with a small C program which reads UDP packets from a socket and replicates them to some other destinations. Easy-peasy :) From: Julian Rutz m...@jurutz.com To: swi...@swinog.ch Sent: Monday, June 17, 2013 8:46 PM Subject: [swinog] sflow proxy/multiplexer Hi there, Maybe some of you folks can give me a hint on this... I do have a linux box which is receiving sflow data from routers/switches/etc. I want this box to forward the sflow data to two or three other hosts. So I am looking for a decent sflow proxy/multiplexer. Any suggestions are welcome - preferably opensource :) Thanks in advance. Cheers, Julian ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] sflow proxy/multiplexer
Oh hai You may have some success with iptables, I didn't test that though: iptables -t mangle -A PREROUTING -p udp --dport 2055 -j TEE --gateway IP of your target host http://stackoverflow.com/questions/14896390/clone-and-forward-with-iptables HTH - Mathias On Jun 17, 2013, at 8:46 PM, Julian Rutz m...@jurutz.com wrote: Hi there, Maybe some of you folks can give me a hint on this... I do have a linux box which is receiving sflow data from routers/switches/etc. I want this box to forward the sflow data to two or three other hosts. So I am looking for a decent sflow proxy/multiplexer. Any suggestions are welcome - preferably opensource :) Thanks in advance. Cheers, Julian ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] sFlow
Hi The 23rd CCC event videos are finally available. This could be interesting to anyone who needs to monitor 100 Gb/s of traffic. http://events.ccc.de/congress/2006/Fahrplan/events/1644.en.html Video: ftp://ftp.stw-bonn.de/pub/23C3/video/23C3-1644-en-sflow.m4v I haven't watched it yet, so no idea whether it's any good. Daniel ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
