[c-nsp] 'multiplexing" netflow?

Adam Powers apowers at lancope.com
Sun Jul 6 14:44:49 EDT 2008


Lancope sells a commercial Flow Replicator that¹s designed for replication
and redistribution of any unidirectional UDP app including NetFlow. It
operates in both unicast and promiscuous modes. More info here...

http://www.lancope.com/products/replicator.aspx

An open source alternative that I know many have used to much success is the
UDP Samplicator project found here:

http://freshmeat.net/projects/samplicator/



On 7/3/08 9:25 AM, "Gordon Bezzina" <gordon.bezzina at bell.net.mt> wrote:

> Hi,
> 
> Get a plain linux box, install flow-tools and use flow-fanout.
> 
> Example:
> 
> /usr/bin/flow-fanout -s 0/192.168.3.5/2000 0/192.168.3.10/9996
> 0/192.168.3.22/2055
> 
> Accept netflow from 192.168.3.5 on port 2000 and re-export them to:
>         1. 192.168.3.10 port 9996; and
>         2. 192.168.3.22 port 2055.
> 
> My linux box has been up for 157days already and flow-fanout never crashed
> :-)
> 
> Hope it helps
> 
> Brgds
> Gordon
> 
> 
> On Thu, Jul 3, 2008 at 11:18, Drew Weaver <drew.weaver at thenap.com> wrote:
>> >                Hi there, we have equipment at our edge that requires us to
> export our netflow to it in order for it to function but we would also like
> our NetFlow stats to be exported somewhere else for analysis.
>> >
>> > Does anyone know of a product that you can export your netflow to that
> will then in turn export it to multiple destinations (that works well and is
> easy to use/reliable) ?
> 
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 


-- 

Adam  Powers
Chief Technology Officer
Lancope, Inc.
c. 678.725.1028
f. 678.302.8744
e. adam at lancope.com



More information about the cisco-nsp mailing list