[c-nsp] 'multiplexing" netflow?
Adam Powers
apowers at lancope.com
Sun Jul 6 14:44:49 EDT 2008
Lancope sells a commercial Flow Replicator that¹s designed for replication
and redistribution of any unidirectional UDP app including NetFlow. It
operates in both unicast and promiscuous modes. More info here...
http://www.lancope.com/products/replicator.aspx
An open source alternative that I know many have used to much success is the
UDP Samplicator project found here:
http://freshmeat.net/projects/samplicator/
On 7/3/08 9:25 AM, "Gordon Bezzina" <gordon.bezzina at bell.net.mt> wrote:
> Hi,
>
> Get a plain linux box, install flow-tools and use flow-fanout.
>
> Example:
>
> /usr/bin/flow-fanout -s 0/192.168.3.5/2000 0/192.168.3.10/9996
> 0/192.168.3.22/2055
>
> Accept netflow from 192.168.3.5 on port 2000 and re-export them to:
> 1. 192.168.3.10 port 9996; and
> 2. 192.168.3.22 port 2055.
>
> My linux box has been up for 157days already and flow-fanout never crashed
> :-)
>
> Hope it helps
>
> Brgds
> Gordon
>
>
> On Thu, Jul 3, 2008 at 11:18, Drew Weaver <drew.weaver at thenap.com> wrote:
>> > Hi there, we have equipment at our edge that requires us to
> export our netflow to it in order for it to function but we would also like
> our NetFlow stats to be exported somewhere else for analysis.
>> >
>> > Does anyone know of a product that you can export your netflow to that
> will then in turn export it to multiple destinations (that works well and is
> easy to use/reliable) ?
>
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
--
Adam Powers
Chief Technology Officer
Lancope, Inc.
c. 678.725.1028
f. 678.302.8744
e. adam at lancope.com
More information about the cisco-nsp
mailing list