Re: [pmacct-discussion] Receiving Netflow, enrich with additional informations and send as netflow to collector

2018-05-01 Thread Tim Weippert
Hi Anthony, thanks, but for phase 4 it is crucial to get the stream replicated via netflow, as the opposite devices expect/support only netflow data. But, thanks for the hint to nifi, maybe in another situation it gets handy. regards, tim On Mon, Apr 30, 2018 at 01:12:33PM +, Anthony Caia

Re: [pmacct-discussion] Receiving Netflow, enrich with additional informations and send as netflow to collector

2018-04-30 Thread Anthony Caiafa
It does not have native netflow. You could still use pmacct and then from there process the data through kafka and have nifi grab the data from kafka and enrich it from there. On Mon, Apr 30, 2018 at 3:40 AM Tim Weippert wrote: > HI Anthony, > > On Sat, Apr 28, 2018 at 11:09:45AM +, Anthony

Re: [pmacct-discussion] Receiving Netflow, enrich with additional informations and send as netflow to collector

2018-04-30 Thread Tim Weippert
HI Anthony, On Sat, Apr 28, 2018 at 11:09:45AM +, Anthony Caiafa wrote: > Phase 4 you can easily achieve with Apache nifi. You could also enrich the > data and send to another queue with Apache nifi also. Thanks for the suggestion, but as i read about nifi, it has no native netflow module/pr

Re: [pmacct-discussion] Receiving Netflow, enrich with additional informations and send as netflow to collector

2018-04-28 Thread Anthony Caiafa
Phase 4 you can easily achieve with Apache nifi. You could also enrich the data and send to another queue with Apache nifi also. On Sat, Apr 28, 2018 at 3:55 AM Tim Weippert wrote: > Hi Paolo, > > On Fri, Apr 27, 2018 at 05:02:07PM +, Paolo Lucente wrote: > > > > Hi Tim, > > > > The first th

Re: [pmacct-discussion] Receiving Netflow, enrich with additional informations and send as netflow to collector

2018-04-28 Thread Tim Weippert
Hi Paolo, On Fri, Apr 27, 2018 at 05:02:07PM +, Paolo Lucente wrote: > > Hi Tim, > > The first three points can be achieved no problem; the 4th is currently > not possible. I'm soon going to start working on a dev that would allow > you to achieve filtering (of networks) with the tee plugin

Re: [pmacct-discussion] Receiving Netflow, enrich with additional informations and send as netflow to collector

2018-04-27 Thread Paolo Lucente
Hi Tim, The first three points can be achieved no problem; the 4th is currently not possible. I'm soon going to start working on a dev that would allow you to achieve filtering (of networks) with the tee plugin (as it does exist today for sFlow). At least in a phase 1 it will not be possible to i

[pmacct-discussion] Receiving Netflow, enrich with additional informations and send as netflow to collector

2018-04-27 Thread Tim Weippert
Hi List, i would like ot know if this is a feasible scenario with pmacct: - Receive Netflow Data (v5/v9) - Enrich them with BGP Data - Send it via amqp to rabbitmq - Send it via nfprobe to other netflow collector (with filtering of src/dst networks, as the collector should only get a specific