On 2011-01-26, Michael W. Lucas <[email protected]> wrote: > On Mon, Jan 24, 2011 at 10:43:36PM +0100, Patrick Lamaiziere wrote: >> Hello, >> >> Are there some plans to implement netflow v9 in pflow(4) (to be able to >> trace ipv6 flows)? >> >> Without, which collector can I use in userland? And is the load >> introduced by such userland tool a concern with a network traffic >> passing the firewall around ~500Mb/s? > > Softflowd. http://www.mindrot.org/projects/softflowd/ > > I believe it will handle the load -- I put 50Mbs through a PF machine > several years ago, and softflowd didn't crack 1% CPU. YMMV.
softflowd is in ports/packages. We also have pmacct which includes pmacctd which should also be able to capture with pcap and export NetFlow data, but I haven't tried using it in this way.
