search

Graylog2 / graylog-plugin-netflow

[DEPRECATED] Graylog NetFlow plugin
https://www.graylog.org/
Apache License 2.0
39 stars 17 forks source link

Support for IPFIX #2

Open rcord02 opened 8 years ago

rcord02 commented 8 years ago

It would be awesome if you could add IPFIX support to this plugin. As it is a "open version of NetFlow" i think this is the right place for it. "NetFlow and IPFIX are flow or messaging technologies that are nearly identical. IPFIX is the official IETF standard and considered by some to be NetFlow v10. IPFIX allows for variable length strings and opens the technology up to allow vendors other than Cisco to export unique details about the traffic passing through their hardware." source: https://www.ipfixcollector.com/ To get a quick overview what it is: https://en.wikipedia.org/wiki/IP_Flow_Information_Export IPFIX compared to NetFlow v9: https://www.plixer.com/blog/netflow/what-is-ipfix-vs-netflow-v9/ related issue for logstash with further information for implementation stuff: https://github.com/logstash-plugins/logstash-codec-netflow/pull/10 Eventually helpful ipfix library: https://github.com/cameronkerrnz/libipfix

59psi commented 6 years ago

I would second this request.

andreaconsadoriw commented 6 years ago

is a must

zez3 commented 6 years ago

We need this, pleeaaaaaase !!!

vladisluv commented 5 years ago

That would be great!

gwasserfall commented 5 years ago

+1

dio99 commented 5 years ago

is there any progress on this // Anders

zez3 commented 4 years ago

I guess this ticket can be closed now. Thank you all for this https://docs.graylog.org/en/latest/pages/integrations/inputs/ipfix_input.html