ipfixer is a collector for IPFIX, NetFlow v9 and NetFlow v5 data. This data is captured and then stored in a MongoDB, MariaDB/MySQL, PostgreSQL or InfluxDB database.
The following package is required:
-
libjansson-dev
-
libyaml-cpp-dev
-
pkg-config for cmake
Optional packages:
-
libmongocxx-dev at moment of writing (March 2024) this package is in Debian in the 'experimental' branch, you can also use the one from https://mongocxx.org/mongocxx-v3/installation/linux/ )
-
libpqxx-dev PostgreSQL support
-
libmariadb-dev MariaDB (MySQL) support
Then:
- mkdir build
- cd build
- cmake ..
- make
Invoke 'ipfixer'. It requires a configuration-file for which an example (ipfixer.yaml) is included.
InfluxDB requires a host/port of a 'graphite endpoint'.
Note: if you get strange "out of range"-errors, make sure you correclty configured IPFIX or NetFlow depending on what the emitter is producing.
Note: you probably don't want "debug" log-level as that uses a lot of CPU.
- EdgeMAX EdgeRouter Lite v1.10.0
- softflowd - https://github.com/irino/softflowd
- ipt_NETFLOW - https://github.com/aabc/ipt-netflow
Written by Folkert van Heusden [email protected]
Released under MIT license.