search

irino / softflowd

softflowd: A flow-based network traffic analyser capable of Cisco NetFlow data export software.
https://github.com/irino/softflowd
Other
162 stars 29 forks source link

Is there an easy way to limit its output to only selective flows? #54

Open jult opened 1 month ago

jult commented 1 month ago

Say I want to only export data/traffic (in bytes) that flows from WAN to LAN and LAN to WAN,, and nothing else. That is to say, when installing softflowd on a debian 12 router that does NAT, so only traffic from interface wan that goes doing NAT to a bunch of bridged LAN-interfaces and many LAN devices behind them. And then capture it to create a list of top internet bandwidth users in the LAN per timeslot, so as to determine which devices on the LAN are (ab)using the internet traffic limits imposed by our upstream provider.

irino commented 1 month ago

I don't know your situation detail, but if you want to specific capture interface, please -i option. And if you want to limit more exact flow you can use pcap expression.