Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Intermediate plugin "joinflows_ip" #212

Open
ACobosD opened this issue Dec 5, 2019 · 1 comment
Open

Intermediate plugin "joinflows_ip" #212

ACobosD opened this issue Dec 5, 2019 · 1 comment

Comments

@ACobosD
Copy link

ACobosD commented Dec 5, 2019

Hi all,
First of all I would like to know if It could be possible to get the information per flow, I mean, flow granularity. I'm trying to get bandwidth, but it is not possible.
Otherwise, I would like to know how set the intermediate plugin "joinflows_ip" in startup.xml file.

Thanks!!!

@Lukas955
Copy link
Contributor

Lukas955 commented Dec 6, 2019

Hi,

can you be more specific about "flow granularity"? Are you looking for something like flow aggregation over a certain time interval? If so, the collector itself doesn't provide such a feature. Flow records must be stored somewhere first (for example, to fastbit) and later aggregated using dumping tool (such as fbitdump).

Otherwise, I would like to know how set the intermediate plugin "joinflows_ip" in startup.xml file.

The plugin was used at a time when the collector was not able to process multiple ODIDs by a single instance of an output plugin. Nowadays, it is not very useful. Do you have a use-case where do you need to merge flows?

By the way, this collector will be obsolete by IPFIXcol2 soon. Consider using the new generation, which is faster and more stable. Its devel branch which contains support for NetFlow v5/v9, structured data types, etc. will be merged to the master by the end of this year.

Lukas

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants