From owner-freebsd-hackers@FreeBSD.ORG Sat Jan 10 08:19:26 2015 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D06BFA92 for ; Sat, 10 Jan 2015 08:19:26 +0000 (UTC) Received: from mail-wi0-x235.google.com (mail-wi0-x235.google.com [IPv6:2a00:1450:400c:c05::235]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 612D83CF for ; Sat, 10 Jan 2015 08:19:26 +0000 (UTC) Received: by mail-wi0-f181.google.com with SMTP id r20so6402084wiv.2 for ; Sat, 10 Jan 2015 00:19:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=sRkDs8PpBUE/8UIH84TByWOkOthhn239Rjn85b6hQek=; b=1Ak0Px067+LAhGl8UN9iO87FSJm2wPceKdqkNgFXPwxMhn2lH27gFp8ZPfEGb5W4Yg KaNjSFnmJ01+vf4FiZ4RHcqW6LNs63Doq+YOtkNE7SDTOJVX9pvVzUjwOjfCo5cnLBsP rh4p7/YIyA45p4cUJZKZLuTxzu/mdznq9OE5NqYia66JFBqyNlkVAmBWW5ws8F1R9Nd4 TPDp9go7pJXsfR46iMd8O63mOZgEYdflvyT2suhqV6elVuxYBrfX7IYf8zah9IeMq024 CpicCFZBA2GheU0J0czv/m8lXPMMhOASuQHFbofJ77I6YZuaM4cYOPuG0dZseS0DeZzr ZNuA== MIME-Version: 1.0 X-Received: by 10.180.76.144 with SMTP id k16mr11916164wiw.3.1420877964721; Sat, 10 Jan 2015 00:19:24 -0800 (PST) Received: by 10.27.177.218 with HTTP; Sat, 10 Jan 2015 00:19:24 -0800 (PST) In-Reply-To: <20150109142531.573303b0@mr185083> References: <45056363-1E83-4318-B870-7F673993166B@emc.com> <20150108101744.2c2a9eae@mr185083> <9085F2E7-5429-4C16-86DB-7C3F04C993DC@emc.com> <20150109110207.45e280dd@mr185083> <3E1BDE12-9A82-4849-AC52-A155C613C1A1@emc.com> <20150109142531.573303b0@mr185083> Date: Sat, 10 Jan 2015 09:19:24 +0100 Message-ID: Subject: Re: if_pflow from OpenBSD From: Nikolay Denev To: Patrick Lamaiziere Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.18-1 Cc: "O'Connor, Daniel" , FreeBSD Hackers X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Jan 2015 08:19:26 -0000 On Fri, Jan 9, 2015 at 2:25 PM, Patrick Lamaiziere wrote: > Le Fri, 9 Jan 2015 08:09:21 -0500, > "O'Connor, Daniel" a =C3=A9crit : > > Hello, > > > > wrote: pflow(4) has the drawback to handle netflow only at the end > > > of the session. > > > > Hmm, really? I looked at the code and it does have timeouts to emit > > things, but perhaps I am misreading it. > > I believed that too but : > > http://misc.openbsd.narkive.com/pS5VJOyH/pflow-packets-before-state-expir= es > > See the Henning Brauer reply. > > Regards, > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org= " > Hi, I've started to use pmacctd[1] (available as pkg as well) recently with great results. Apart from netflow it has also other nice features, like exporting BGP ASN information, storing data in database, etc. [1]: http://www.pmacct.net --Nikolay