Hi Georgios,
You can make the mapping specific to a plugin no problem, ie.:
plugins: print[inbound], print[outbound]
!
pre_tag_map[inbound]: /path/to/pretag-inbound.map
! [.. ]
!
pre_tag_map[outbound]: /path/to/pretag-outbound.map
! [ .. ]
!
Paolo
On Mon, Nov 13, 2017 at 10:49:59AM +0100, Geo
Hi Anthony,
I map the word 'message' to 'flow' and not to NetFlow packet, please
correct me if this assumption is wrong. 55m flows/min makes it roughly
1m flows/sec. I would not recommend stretching a single nfacctd daemon
beyond beyond 200K flows/sec and the beauty of NetFlow, being UDP, is
that
Hi!.. so i have the load spread between a 3 machines and 2 ports per
box. the biggest thing in the netflow data is the ordering for me. I
guess where i am still curious is would either of those settings be
causing the complete drop in the service where it starts and stops
every 5 minutes on the do
