nProbe icon indicating copy to clipboard operation
nProbe copied to clipboard

The ability to collect flows only between local networks

Open The-Astiks opened this issue 8 months ago • 2 comments

We use nProbe in collector mode and collect flows for all interactions with external networks. But we would also like to be able to filter the NetFlow/sFlow streams received by nProbe so that only flows between our networks are saved, and everything that has an external source or destination address is discarded.

For example, if there are local networks 10.0.0.0/8 and 1.2.3.0/24:

10.0.0.0/8 <-> 10.0.0.0/8 - pass and store
1.2.3.0/24 <-> 1.2.3.0/24 - pass and store
10.0.0.0/8 <-> 1.2.3.0/24 - pass and store
external <-> local - filter out and discard

It would be great if you could implement similar functionality.

The-Astiks avatar Feb 24 '25 08:02 The-Astiks