search

davidhhunter / flow-tools

Automatically exported from code.google.com/p/flow-tools
Other
0 stars 0 forks source link

Feature request: IPFIX #19

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
Are there any plans to support Internet Protocol Flow Information Export 
(IPFIX) ?  I'm hoping for IPv6 capabilities, so I don't have to find something 
different to use on my collectors.  Thanks.

Original issue reported on code.google.com by ter...@gmail.com on 15 Aug 2011 at 9:59

GoogleCodeExporter commented 8 years ago 
VMware 5 generates IPFIX and calls it "Netflow".  Handling these is possible 
with a translator from nfdump something like this -- ./bin/nfcapd -t 300 -z -D 
-p 2055 -l ipfixdatadir -x './bin/nfreplay -r %d/%f -p 8818'

Original comment by derdeoli...@gmail.com on 15 Apr 2013 at 12:16

GoogleCodeExporter commented 8 years ago 
IPFIX pretty much = NetFlow v10. But flow-tools doesn't handle anything
after v8.

The problem is that v9 & 10 are templated protocols, and v1-8 are fixed.
This makes parsing v9 and 10 very different, more complex, and stateful. I
don't think the flow-tools code can take these changes easily, and a lot of
the CLI options would need to be tweaked as well.

Original comment by quintin....@gmail.com on 15 Apr 2013 at 7:10