My goal is to do segregation on netflow data based on source IP address to other flow analyzing tools while keeping a aggregated local copy.
I am currently having all netflow forwarding to my RedHat FC2 box runing flow-tools 0.68 and using flow-fanout with filter to do the trick. However, it seems like flow-fanout with source IP spoofing (-s parameter) will not work with filter (-f fileter_file). Is it me or the limitation of flow-fanout? Any thought?
Jason
_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
