netflow support in argus-clients ?

[Gilles Gallot]

Dear all,

Le 03/22/11 01:32, Carter Bullard a écrit :
> Gentle people,
> There was discussion regarding new netflow support for argus and I'd like to get some
> sense as to what people would like to see.
>
> At this point, we're investigating importing netflow v9 and/or IPFIX flow records into argus-clients.
could you integrate netflow v7 ?

SFLOW is an other technology that argus  should support

> I am also looking into reading flow-tools file formats.  Is there interest in any of these features?
>
> I am also investigating exporting arcsight specific data output format and netflow v5 format
> from radium().  While IPFIX stream output is not on the radar, IPFIX output file formats are possibly
> on the list.  None of these are trivial to implement, so we'l have to have a really good reason.
>
> Opinions, suggestions, comments, attitude, whatever, are more than welcome.
>
> Carter