what it is

ipfixer is a collector for IPFIX, NetFlow v9 and NetFlow v5 data. This data is captured and then stored in a MongoDB, MariaDB/MySQL, PostgreSQL or InfluxDB database.

compiling

The following package is required:

• libjansson-dev

• libyaml-cpp-dev

• pkg-config for cmake

Optional packages:

• libmongocxx-dev at moment of writing (March 2024) this package is in Debian in the 'experimental' branch, you can also use the one from https://mongocxx.org/mongocxx-v3/installation/linux/ )

• libpqxx-dev PostgreSQL support

• libmariadb-dev MariaDB (MySQL) support

Then:

• mkdir build
• cd build
• cmake ..
• make

usage

Invoke 'ipfixer'. It requires a configuration-file for which an example (ipfixer.yaml) is included.

InfluxDB requires a host/port of a 'graphite endpoint'.

Note: if you get strange "out of range"-errors, make sure you correclty configured IPFIX or NetFlow depending on what the emitter is producing.

Note: you probably don't want "debug" log-level as that uses a lot of CPU.

tested with

• EdgeMAX EdgeRouter Lite v1.10.0
• softflowd - https://github.com/irino/softflowd
• ipt_NETFLOW - https://github.com/aabc/ipt-netflow

Written by Folkert van Heusden mail@vanheusden.com

Released under MIT license.