Sean Malloy wrote:
Hello,
Maybe NetFlow. Checkout the pfflowd and flowd packages.
I seem to recall it being said that the recent change if the pfsync
protocols (which pfflowd uses as its datasource) means that since 4.3
(possibly 4.2, I forget when the pfsync stuff went in) pfflowd doesn't
work any more on -stable. I could be wrong. Its a shame, as some of the
graphs that can be created from the netflow data are *really* useful.
They're pretty too, which is good for impressing managers.
Anyone fancy a little donation drive to encourage Damien Miller to
update pfflowd? I fear the issue is time rather than money, so it may
not do much good...
SD