Ok. well, as long as you're situated in a place that lets you see the
MAC addresses, you should be ok. You just need to hack the netflow
module to include the source/destination mac address.
adrian
___
freebsd-net@freebsd.org mailing list
http://lists.
On 02/19/2013 06:02 PM, Adrian Chadd wrote:
.. I assume that your netflow collector is positioned correctly so it
can see the actual client MAC, rather than the MAC of the L3 gateway
device?
Yes, we've checked with tcpdump. The mirror port simply copies the packets as
they flow from our client
.. I assume that your netflow collector is positioned correctly so it
can see the actual client MAC, rather than the MAC of the L3 gateway
device?
adrian
On 19 February 2013 02:49, Jan Markus wrote:
> Hello,
>
> our Ministry of the interior now requires that IP traffic logs must contain
> MAC
On 19.02.2013 14:49, Jan Markus wrote:
> Hello,
Hello.
>
> our Ministry of the interior now requires that IP traffic logs must
> contain MAC addresses of our clients. I am trying to fulfil this with
> Netflow v9 which (allegedly) should contain the MAC addresses of IP flows.
Netflow version 9 is
Hello,
our Ministry of the interior now requires that IP traffic logs must contain MAC
addresses of our clients. I am trying to fulfil this with Netflow v9 which
(allegedly) should contain the MAC addresses of IP flows.
But with no success so far...
We have a mirror port on our core switch a
