Feature request: IPFIX #19

Activity

1. GoogleCodeExporter commented on Feb 4, 2016

   

   GoogleCodeExporter

   on Feb 4, 2016

   Author

   More actions

   VMware 5 generates IPFIX and calls it "Netflow".  Handling these is possible 
   with a translator from nfdump something like this -- ./bin/nfcapd -t 300 -z -D 
   -p 2055 -l ipfixdatadir -x './bin/nfreplay -r %d/%f -p 8818'
   
   

   Original comment by derdeoli...@gmail.com on 15 Apr 2013 at 12:16
2. GoogleCodeExporter commented on Feb 4, 2016

   

   GoogleCodeExporter

   on Feb 4, 2016

   Author

   More actions

   IPFIX pretty much = NetFlow v10. But flow-tools doesn't handle anything
   after v8.
   
   The problem is that v9 & 10 are templated protocols, and v1-8 are fixed.
   This makes parsing v9 and 10 very different, more complex, and stateful. I
   don't think the flow-tools code can take these changes easily, and a lot of
   the CLI options would need to be tweaked as well.
   

   Original comment by quintin....@gmail.com on 15 Apr 2013 at 7:10
3. GoogleCodeExporter

   added

   Priority-Medium

   Type-Defect

   auto-migrated

   on Feb 4, 2016