vflow
vflow copied to clipboard
Enterprise Network Flow Collector (IPFIX, sFlow, Netflow)
It seems we cannot build vflow like this anymore: ``` # go get github.com/EdgeCast/vflow/vflow go: go.mod file not found in current directory or any parent directory. 'go get' is no...
- Updated all dependencies to their latest version. - Removed `samara-cluster` since it's deprecated and merged into `Shopify/sarama`. The code for generating this was done using GPT-4 - Updated go.mod...
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20220513224357-95641704303c to 0.7.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Automatically creates topics(unlike kafka.segmentio), but the timestamp for all messages is always 01/01/1970, 06:59:59
vflow.conf ``` pid-file: vflow.pid mq-name: kafka.segmentio ipfix-enabled: true ipfix-port: 4739 ipfix-workers: 10 sflow-enabled: true sflow-port: 6343 sflow-workers: 10 netflow5-enabled: true netflow5-port: 9996 netflow5-workers: 10 netflow9-enabled: true netflow9-port: 9995 netflow9-workers: 10...
Currently V9 and IPFIX templates are cached using template id and exporter address as a key. Rfc3954 implies that v9 templates should be cached using the following fields: msg header...
There are several people that asked for extending vflow support of sflow that it'll parse extended sample and counter packets (type 3 and 4). Specifically, @KrunalT, @yangyu66 in issue #154,...
using stress test tool generating around 200Kps sflow packet and observed intermittent UDP InErrors(also attached below) tried increase UDP recieve buffer size to very huge 750MB but not help(both system...
A sflow packet with multiple samples, where one of the samples contains non-UDP/TCP/ICMP packet sample causes the whole sflow packet to be dropped. A simple fix for this is to...
The nf9/ipfix protocols have many fields of type 'string'. The code today just takes the string as it appears in the packet and puts it in the JSON output. There...