sflow proxy/multiplexer

List overview All Threads
Download

newer

older

dns oddity with cns7.bluewin.ch

IANA AS Numbers registry update

Julian Rutz

17 Jun 2013 17 Jun '13

8:46 p.m.

Hi there,

Maybe some of you folks can give me a hint on this...

I do have a linux box which is receiving sflow data from routers/switches/etc. I want this box to forward the sflow data to two or three other hosts. So I am looking for a "decent" sflow proxy/multiplexer.

Any suggestions are welcome - preferably opensource :)

Thanks in advance.

Cheers,

Julian

Show replies by date

Stanislav Sinyagin

17 Jun 17 Jun

11:43 p.m.

should be quite easy to solve with a small C program which reads UDP packets from a socket and replicates them to some other destinations. Easy-peasy :)

...

From: Julian Rutz mail@jurutz.com To: swinog@swinog.ch Sent: Monday, June 17, 2013 8:46 PM Subject: [swinog] sflow proxy/multiplexer

Hi there,

Maybe some of you folks can give me a hint on this...

I do have a linux box which is receiving sflow data from routers/switches/etc. I want this box to forward the sflow data to two or three other hosts. So I am looking for a "decent" sflow proxy/multiplexer.

Any suggestions are welcome - preferably opensource :)

Thanks in advance.

Cheers,

Julian

swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Mathias Seiler

18 Jun 18 Jun

12:17 a.m.

Oh hai

You may have some success with iptables, I didn't test that though:

iptables -t mangle -A PREROUTING -p udp --dport 2055 -j TEE --gateway <IP of your target host>

http://stackoverflow.com/questions/14896390/clone-and-forward-with-iptables

HTH - Mathias

On Jun 17, 2013, at 8:46 PM, Julian Rutz mail@jurutz.com wrote:

...

Hi there,

Maybe some of you folks can give me a hint on this...

I do have a linux box which is receiving sflow data from routers/switches/etc. I want this box to forward the sflow data to two or three other hosts. So I am looking for a "decent" sflow proxy/multiplexer.

Any suggestions are welcome - preferably opensource :)

Thanks in advance.

Cheers,

Julian

swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Roman Hochuli

9:35 a.m.

Hey Ju

...

Any suggestions are welcome - preferably opensource :)

I would think about something along these lines...

UDP Samplicator: http://freecode.com/projects/samplicator

Lancope Flow Replicator (commercial): http://www.lancope.com/products/stealthwatch-system/flowreplicator/

Flow Fanout (NetFlow only, but maybe simple to modify): http://www.splintered.net/sw/flow-tools/docs/flow-fanout.html

Or build your own solution with Elisa Jasinska Net::sFlow-Module: http://search.cpan.org/~elisa/Net-sFlow-0.04X/sFlow.pm

-- Best regards, Roman Hochuli Operations Manager nexellent ag Saegereistrasse 33 CH-8152 Glattbrugg Phone: +41 44 872 20 00 Fax: +41 44 872 20 01 URL: www.nexellent.ch X-NCC-RegID: ch.nexellent Imagination is the one weapon in the war against reality. -- Jules de Gaultier

Thomas King

3:27 p.m.

Hallo zusammen,

Wir haben mal eine Java Sflow Library http://jsflow.sourceforge.netgeschrieben für solche Zwecke. Mit der Library kann man Sflow weiterleiten und auch umschreiben.

HTH Thomas On Jun 17, 2013 8:59 PM, "Julian Rutz" mail@jurutz.com wrote:

...

Hi there,

Maybe some of you folks can give me a hint on this...

I do have a linux box which is receiving sflow data from routers/switches/etc. I want this box to forward the sflow data to two or three other hosts. So I am looking for a "decent" sflow proxy/multiplexer.

Any suggestions are welcome - preferably opensource :)

Thanks in advance.

Cheers,

Julian

swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

4158

Age (days ago)

4159

Last active (days ago)

swinog@lists.swinog.ch

4 comments

5 participants

tags (0)

participants (5)

Julian Rutz
Mathias Seiler
Roman Hochuli
Stanislav Sinyagin
Thomas King