giros-dit / semantic-data-aggregator

A semantic monitoring framework for aggregating data from heterogeneous sources.
Apache License 2.0
5 stars 0 forks source link

Modify goflow2 to add TimeFlowStartMs and TimeFlowEndMs #82

Closed ghost closed 2 years ago

ghost commented 2 years ago

As proposed in https://github.com/netsampler/goflow2/issues/78 instead of modifying the FIRST_SWITCHED and LAST_SWITCHED is a better option to create new features:

DOCUMENTATION

ghost commented 2 years ago

Instead of using tcpreplay to send the traffic it can be used softflowd to read from a pcap file using the "-r" argument.

To use netflow v9 with goflow2:

  goflow2:
      build:
        context: ./docker/goflow2
        dockerfile: Dockerfile
      hostname: goflow2
      container_name: goflow2
      ports:
        - 9995:9995/udp
      depends_on:
        - kafka
      restart: always
      command:
      - -transport=kafka
      - -transport.kafka.brokers=kafka:9092
      - -transport.kafka.topic=flows
      - -format=json
      - -listen=nfl://:9995 # to use netflow v5
#      - -listen=netflow://:9995 # to use netflow v9 or v10 (IPFIX)
ghost commented 2 years ago

Pull merged in: https://github.com/netsampler/goflow2/pull/81