[Nfsen-discuss] Re-eposrting flow data

[Tore A. <to...@fu...>]

Hi,

I have a customer who would like access to his own flow data. I can't
give him access to *all* my flow data, but I was wondering if is somehow
possible to have nfcapd apply a filter that matches his network ranges,
and then re-export the matching flows to the customer's  collector?

Or any other way to accomplish this in a nice way? One of the use-cases
is to quickly determine what's going on during DoS attacks, so it has to
be (near-)realtime.

Tore