Re: [Flow-tools] trouble with flow-fanout (spoofed ifindex?)

2006-08-23 Thread Adam Powers
You're best bet is UDP Samplicator. I've used it extensively for replicating NetFlow, sFlow, and syslog. Preserves the source IP and provides a relatively simple configuration file format. http://freshmeat.net/projects/samplicator/ - Adam On 8/22/06 10:08 PM, jay alvarez [EMAIL PROTECTED]

[Flow-tools] trouble with flow-fanout (spoofed ifindex?)

2006-08-22 Thread jay alvarez
Hi, Supposed we have a netflow collector which captures raw flows using flow-scan, throws a copy of each to a flow-capture listening on loopback and another copy on a remote machine. The ip which runs flow-fanout is 192.168.1.19. The ip of another collector is 192.168.1.20 Flow-fanout was

Re: [Flow-tools] trouble with flow-fanout (spoofed ifindex?)

2006-08-22 Thread jay alvarez
--- Jonathan Glass [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I gave up on using flow-fanout to distribute flows, and bought a flow mirroring appliance from Lancope.com How about flow-send? Anyone who knows an opensource tool to distribute flows to other