On 2008-07-16, Dave Wilson <[EMAIL PROTECTED]> wrote: > Sean Malloy wrote: >> Hello, >> >> Maybe NetFlow. Checkout the pfflowd and flowd packages. > > I seem to recall it being said that the recent change if the pfsync > protocols (which pfflowd uses as its datasource) means that since 4.3 > (possibly 4.2, I forget when the pfsync stuff went in) pfflowd doesn't > work any more on -stable. I could be wrong. Its a shame, as some of the > graphs that can be created from the netflow data are *really* useful. > They're pretty too, which is good for impressing managers.
There's also softflowd, which can listen on an interface to pick up flows. Overhead is higher but it might get you something working until pfflowd can be mended.
