search

pavel-odintsov / fastnetmon

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
https://fastnetmon.com
GNU General Public License v2.0
3.41k stars 565 forks source link

Segregate netflow sources #704

Closed chasgames closed 6 years ago

chasgames commented 6 years ago

Hello

We have multiple netflow sources sending data to fastnetmon, and in grafana we want to segregate the sources in the graphs. Is this possible? I can only find total statistics like fastnetmon.incoming.mbps, etc..

Thanks!

pavel-odintsov commented 6 years ago

Hello!

Could you explain what do you want in details, please? FastNetMon merges all sources together and exports only per IP and per subnet traffic information to Graphite/InfluxDB.

You could run one instance of FNM if you need options to export data about different data sources to different dashboards.

chasgames commented 6 years ago

Hi Pavel !

I want to differentiate the netflow traffic based on the origin of the netflow sender.

Currently all our netflow sources are merged together like you mentioned, we see there is value in keeping them separate for graph analysis (such as in NFsen).

Is this possible in current FNM?

Many Thanks

pavel-odintsov commented 6 years ago

Hello!

I do not think so. But you could deploy different FNM instances for each device.

chasgames commented 6 years ago

Ok Thanks for the suggestion we will give that a try