OpenBSD Journal

New pflow(4) Features Added

Contributed by jason on from the dont-cross-the-streams dept.

Joerg Goltermann (gollo@) recently committed changes to pflow(4) to expand its usefulness for troubleshooting and accounting.

Read on for more details.

Last week, Joerg added bpf(4) and tcpdump(8) support to pflow, making it possible to monitor the raw packets exported from the pflow interface. And with his recent commit, it's now possible to create multiple pflow(4) interfaces at once. This feature makes it possible to use different flowsrc or flowdst values for sending to different NetFlow collectors.

List:       openbsd-cvs
Subject:    CVS: cvs.openbsd.org: src
From:       Joerg Goltermann 
Date:       2008-10-28 15:51:27


CVSROOT:	/cvs
Module name:	src
Changes by:	gollo@cvs.openbsd.org	2008/10/28 09:51:27

Modified files:
	sys/net        : if_pflow.c if_pflow.h 

Log message:
add support for multiple pflow(4) interfaces

OK: claudio@ henning@

This is yet another reason to support ongoing OpenBSD development. If you haven't already, take a moment to order your OpenBSD 4.4 CD set (Worldwide, Europe) or make a direct donation.

(Comments are closed)


Credits

Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original deadly.org with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]