if_pflow from OpenBSD

[Nikolay Denev]

On Fri, Jan 9, 2015 at 2:25 PM, Patrick Lamaiziere <patfbsd at davenulle.org>
wrote:

> Le Fri, 9 Jan 2015 08:09:21 -0500,
> "O'Connor, Daniel" <Daniel.O'Connor at emc.com> a écrit :
>
> Hello,
>
> > > wrote: pflow(4) has the drawback to handle netflow only at the end
> > > of the session.
> >
> > Hmm, really? I looked at the code and it does have timeouts to emit
> > things, but perhaps I am misreading it.
>
> I believed that too but :
>
> http://misc.openbsd.narkive.com/pS5VJOyH/pflow-packets-before-state-expires
>
> See the Henning Brauer reply.
>
> Regards,
> _______________________________________________
> freebsd-hackers at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"
>

Hi,

I've started to use pmacctd[1] (available as pkg as well) recently with
great results. Apart from netflow it has also other nice features,
like exporting BGP ASN information, storing data in database, etc.

[1]: http://www.pmacct.net

--Nikolay