search

irino / softflowd

softflowd: A flow-based network traffic analyser capable of Cisco NetFlow data export software.
https://github.com/irino/softflowd
Other
162 stars 29 forks source link

softflowctl with sqlite3 #47

Open laoshaw opened 1 year ago

laoshaw commented 1 year ago

is it possible to let softflowctl dump-flows to save flow info to a sqlite3 database locally and then use it to report detailed info as nfdump does? that way I don't need run nfcapd on the device which is a bit resource hungry, sometimes I want to run collector where the probe runs.

irino commented 1 year ago

I think nfdump does not support sqlite3. Do you have any reference?

laoshaw commented 1 year ago

sorry I did not make it clear, nfdump does not support sqlite3 either. I want to get rid of nfdump and use softflowctl on the device directly to collect flow information over time, and sqlite3 came to mind. the point is to remove nfcapd as it is a bit memory hungry on the device with limited resources, then use softflowctl to replace nfdump.