[Nfsen-discuss] Re-eposrting flow data
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: Tore A. <to...@fu...> - 2013-04-17 10:42:43
|
Hi, I have a customer who would like access to his own flow data. I can't give him access to *all* my flow data, but I was wondering if is somehow possible to have nfcapd apply a filter that matches his network ranges, and then re-export the matching flows to the customer's collector? Or any other way to accomplish this in a nice way? One of the use-cases is to quickly determine what's going on during DoS attacks, so it has to be (near-)realtime. Tore |