nanog mailing list archives

Re: Proxying NetFlow traffic correctly


From: Selphie Keller <selphie.keller () gmail com>
Date: Tue, 6 Jun 2017 20:56:50 -0600

samplicate is very good, been using it for 6 years for netflow duplication
using botth the spoofing and non, depending on the sensor's needs if it
needs to retain the source ip or not.



On 6 June 2017 at 20:39, Dobbins, Roland <rdobbins () arbor net> wrote:



On Jun 7, 2017, at 06:32, Sami via NANOG <nanog () nanog org<mailto:nanog@
nanog.org>> wrote:

My goal is to centralize NetFlow traffic into a single machine and then
proxy some flows to other destinations for further analysis

<https://github.com/sleinen/samplicator>

Or nprobe, as was already mentioned.

-----------------------------------
Roland Dobbins <rdobbins () arbor net<mailto:rdobbins () arbor net>>



Current thread: