[pmacct-discussion] ip_proto field (wrt netflow)

[Matt Lawson]

I have nfacctd working pretty well now.  One question though.  The "ip_proto" 
field always indicates "ip".  It is possible using netflow (version 9 *I 
think*), to determine whether the type of the described flows are TCP vs. UDP ? 
 

Does this require configuration on the router, in the nfacctd file, or is 
pmacctd the only daemon which can categorize flows as TCP/UDP?

Thanks.

- matt



      

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists