Log in to ask questions, share your expertise, or stay connected to content you value. Don’t have a login? Learn how to become a member.
I have a question about IPFIX collection. There is a comprehensive documentation related to configuring all kinds of *flow on MX series, but no info about collectors. We are using flow-capture at this moment and it doesn't seem to support ipfix.
What collectors do you use? Please, advice some free collector which works on linux.
Thanks in advance.
Kindly post this query in routing section for quick response.
The IPFIX export from the Juniper MX series has been tested with Scrutinizer and it works well.
You can use STRM also for flow collector also.
Nfdump seems to work fine, but since it is be better for me to keep existing collector (flow-capture) and it doesn't support ipfix, i found a workaround:
nfcapd -t 300 -z -D -p 9999 -l /home/dmsh/netflow/nfcapd/ -x 'nfreplay -r %d/%f -p 9998'
It listens to ipfix on port 9999, converts it to netflow v5 and sends to flow-capture which is running on port 9998.
Probably it is not the best solution, just optimal in my case. For new installations, better use nfdump.
The problem is solved, thanks to everyone.
This post on Juniper IPFIX Support provides a config and a video showing the types of reports you can generate with the new IPFIX export from the MX series.
I hope this helps.