<![CDATA[Sflow / NEtflow]]>I know there was a few old posts about adding support. Just kinda curious if any progress was made in that regard. And to add my use case for this feature.

It would be very handy in my case to monitor the company edge routers for DDOS attacks.

In this use case basically you need to know the "top talkers" and keep an avg of the packets per sec per ip.
Also maybe the top 3 protocols mail, http, ssh etc..

Currently my solution is not the best, I have another bit of software that sends syslog messages to netxms. For further event processing.

]]>https://forum.netxms.org/topic/4351/sflow-netflowRSS for NodeFri, 13 Nov 2026 11:12:26 GMTMon, 14 Mar 2016 17:39:24 GMT60<![CDATA[Reply to Sflow / NEtflow on Mon, 07 Nov 2016 14:58:49 GMT]]>Netflow data analysis would be great, but I do understand that even basic implementation can be quite demanding task.
Is this the part that is already implemented http://git.netxms.org/public/netxms.git/history/HEAD:/src/flow_analyzer?js=1 ?

Which protocols are other users mostly interested in?

  • sFlow
  • NetFlow v5
  • NetFlow v9
  • IPFIX
  • some other?

 Best Regards,
 Lukas

]]>https://forum.netxms.org/post/21325https://forum.netxms.org/post/21325Mon, 07 Nov 2016 14:58:49 GMT<![CDATA[Reply to Sflow / NEtflow on Thu, 11 Aug 2016 15:23:47 GMT]]>are there some news? Maybe in V2.1?

]]>https://forum.netxms.org/post/20610https://forum.netxms.org/post/20610Thu, 11 Aug 2016 15:23:47 GMT<![CDATA[Reply to Sflow / NEtflow on Wed, 30 Mar 2016 01:51:16 GMT]]>We are currently also using additional software for flow data.
Our use case is less about alerting on DDoS or similar, but retroactively searching through the available data to identify specific data flows at a given time.
Either way, it would certainly be a nice to have.

]]>https://forum.netxms.org/post/19497https://forum.netxms.org/post/19497Wed, 30 Mar 2016 01:51:16 GMT