Re: [ovs-discuss] Support for in/out interfaces in IPFIX

2016-10-04 Thread Ben Pfaff
On Wed, Sep 21, 2016 at 10:46:04AM +0200, Ben de Graaff wrote: > I'm currently working on traffic analysis for detecting various security > events on a network and finding flow paths throughout the network. Part > of this work includes tracking/visualizing network flows on a > per-host/per-port bas

Re: [ovs-discuss] Support for in/out interfaces in IPFIX

2016-09-21 Thread Peter Phaal
sFlow-RT is a programmable external flow cache that handles the packet parsing. It can be programmed to export IPFIX records. http://blog.sflow.com/2016/05/sflow-to-ipfix.html # start the flow cache docker run -p 6343:6343/udp -p 8008:8008 -p 4

[ovs-discuss] Support for in/out interfaces in IPFIX

2016-09-21 Thread Ben de Graaff
Hi all, I'm currently working on traffic analysis for detecting various security events on a network and finding flow paths throughout the network. Part of this work includes tracking/visualizing network flows on a per-host/per-port basis. For this I'm currently working with OVS since it support