[flow-tools] multiple exporters using same port to export.

Jen Linkova jen@rambler-co.ru
Mon, 17 Jun 2002 12:42:24 +0400


			Hi!

On Fri, Jun 14, 2002 at 02:12:01PM -0700, Jason wrote:
> Currently we are using cflow package to receive flows from our
> devices.  However we are looking into flow tools because they appear to be
> more current and have a lot more features.  
> 
> Our problem is that we set the destination port on all of our routers to
> the same port (9994), so when we use this command
> % flow-capture -w . -N 3 0/0/9994
> it dumps all flows to one file.
> 
> We would like to have it split it up into multiple files based on the
> remoteip (exporter router) device.

You can use samplicator (small program receives UDP datagrams on a given port,
 and resends those datagrams to a specified set of receivers.
See http://www.switch.ch/tf-tant/floma/sw/samplicator/) 
with multiple instances of flow-capture.  
Run 'flow-capture -w . -N 3 localip/routerip/X'
And then resend netflow udp datagrams with dst IP = localip, and 
dst port = 9994 to localip, port X.
So, you don't need to change
routers configurations.

----------------
SY, Jen Lin'kova aka Furry 	jen@rambler-co.ru