Hi,
I am using nprobe to convert from sflow to netflow v9 and send it to
logstash.
I am facing a problem with the fact that logstash see all flows from
127.0.0.1 and I cant identify the source host for the sflow data.
I know I can run multiple nprobe process with diffarent ports but I dont
want to
I found a solution to send the expoter_ipv4_address that include the
original source but I hit a bug as the ip address is reverse (If the sflow
exporter is 1.2.3.4 the expoter_ipv4_address is 4.3.2.1 )
Thanks
Nitzan
On Mon, Oct 17, 2016 at 4:12 PM, Nitzan Tzelniker <
nitzan.tzelni...@gmail.com>