-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Isherwood, Jeffrey - AES wrote:
> I would like to take the output from our Netflow devices and send it to 3 to 
> 4 different locations to accommodate managed services contractors, network 
> staff, customer support and research initiatives...
> 
> I'm looking to collect flows from all across the enterprise, store them and 
> redirect them out to other people/units that have need of them.  Most 
> equipment I've looked at has a limit of two Netflow destinations each, so I 
> thought that NFDUMP might be the solution.

No - nfcapd just can forward the flows for daisy chaining the flow traffic. To 
fan out to many places, have a look into
samplicator: http://freshmeat.net/projects/samplicator/ from my
colleague Simon Leinen.

Hop, this helps

        - Peter

> 
> I've begun building a CentOS box and while it is building, I have been 
> reading thru documentation on NFDUMP.  I am at a loss to find instructions 
> for pushing the data off the CentOS box to other devices.  Perhaps I'm 
> missing something?  Or do I need more than NFDUMP installed?
> 
> I hesitate to install NFSEN because the box needs to be locked down tightly, 
> and I didn't intend on running apache, I just wanted a system to accept a 
> large number of inbound flows from many sources and forward them as a single 
> stream to multiple sources.
> 
> Can someone point me at the right resource?
> 
> Thanks!
> 
> Jeffrey...
> 
> ________________________________
> This e-mail and any files transmitted with it may be proprietary and are 
> intended solely for the use of the individual or entity to whom they are 
> addressed. If you have received this e-mail in error please notify the sender.
> Please note that any views or opinions presented in this e-mail are solely 
> those of the author and do not necessarily represent those of ITT 
> Corporation. The recipient should check this e-mail and any attachments for 
> the presence of viruses. ITT accepts no liability for any damage caused by 
> any virus transmitted by this e-mail.
> 
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> This SF.Net email is sponsored by the Verizon Developer Community
> Take advantage of Verizon's best-in-class app development support
> A streamlined, 14 day to market process makes app distribution fast and easy
> Join now and get one step closer to millions of Verizon customers
> http://p.sf.net/sfu/verizon-dev2dev 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Nfdump-discuss mailing list
> Nfdump-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: peter.h...@switch.ch Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iQCVAwUBSynXZ/5AbZRALNr/AQIKmAP/ZWILEqrQFsOxpCQEsIJo6QkrhNd6zKe2
O2LQ5N///tfxNkJz8eVICP5t9inisF78+8uXWL7+p6DfOerxKLjFiKVDQldP/x6l
D5WzCX5srRxYESiucj7CryGY/nANe6QUgTU8fksZjCl8KOzX0eO91zUno3A1soeD
FVme5MZHDzc=
=B+Eg
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Nfdump-discuss mailing list
Nfdump-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfdump-discuss

Reply via email to