Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 8 Sep 2004 12:56:07 +0400
From:      Gleb Smirnoff <glebius@freebsd.org>
To:        Patrick.Guelat@imp.ch
Cc:        net@freebsd.org
Subject:   Re: [TEST/REVIEW] Netflow implementation
Message-ID:  <20040908085607.GG597@cell.sick.ru>
In-Reply-To: <20040908103529.V97761@murphy.imp.ch>
References:  <20040905121111.GA78276@cell.sick.ru> <20040908103529.V97761@murphy.imp.ch>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Sep 08, 2004 at 10:43:34AM +0000, Patrick.Guelat@imp.ch wrote:
P> > here is netgraph module which implements Netflow traffic
P> >accounting, which I'm going to add to CURRENT in recent future:
P> >[..]
P> >I've been testing it for last week on loaded 100Mbit Ethernet
P> >which serves 9 ASes, 12 prefixes :) And it works stable.
P> 
P> Did some tests here, looks very nice ! At least our netflow-collector
P> is happy with the data ;-)

The only empty fields are ASNs :) I hope to fill them in future.

P> flowctl did not work for me, to which
P> node do you have to send the msg to ?

I usually call node "netflow" using 'ngctl name', and then call
'flowctl netflow show'.

P> I attached two netflow nodes on a tee, one right2left and one left2right
P> to catch both directions.

This is working solution, but not correct. :)
To catch both directions you should feed ng_netflow with incoming traffic
from all interfaces.

-- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040908085607.GG597>