[flow-tools] multiple exporters using same port to export.

[Mark Fullmer]

Just curious, what does samplicator do that flow-fanout does not?

On Mon, Jun 17, 2002 at 12:42:24PM +0400, Jen Linkova wrote:
> 			Hi!
> 
> On Fri, Jun 14, 2002 at 02:12:01PM -0700, Jason wrote:
> > Currently we are using cflow package to receive flows from our
> > devices.  However we are looking into flow tools because they appear to be
> > more current and have a lot more features.  
> > 
> > Our problem is that we set the destination port on all of our routers to
> > the same port (9994), so when we use this command
> > % flow-capture -w . -N 3 0/0/9994
> > it dumps all flows to one file.
> > 
> > We would like to have it split it up into multiple files based on the
> > remoteip (exporter router) device.
> 
> You can use samplicator (small program receives UDP datagrams on a given port,
>  and resends those datagrams to a specified set of receivers.
> See http://www.switch.ch/tf-tant/floma/sw/samplicator/) 
> with multiple instances of flow-capture.  
> Run 'flow-capture -w . -N 3 localip/routerip/X'
> And then resend netflow udp datagrams with dst IP = localip, and 
> dst port = 9994 to localip, port X.
> So, you don't need to change
> routers configurations.
> 
> ----------------
> SY, Jen Lin'kova aka Furry 	jen@rambler-co.ru
> 
> _______________________________________________
> flow-tools@splintered.net
> http://www.splintered.net/sw/flow-tools