The ability to collect flows only between local networks
Nobody has claimed this yet.
- Dominant language
- Lua
- Stars
- 1.8k
- Forks
- 51
- PR merge metrics
- No merged PRs in 30d
Description
We use nProbe in collector mode and collect flows for all interactions with external networks.
But we would also like to be able to filter the NetFlow/sFlow streams received by nProbe so that only flows between our networks are saved, and everything that has an external source or destination address is discarded.
For example, if there are local networks 10.0.0.0/8 and 1.2.3.0/24:
10.0.0.0/8 <-> 10.0.0.0/8 - pass and store
1.2.3.0/24 <-> 1.2.3.0/24 - pass and store
10.0.0.0/8 <-> 1.2.3.0/24 - pass and store
external <-> local - filter out and discard
It would be great if you could implement similar functionality.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source file or test is named in the issue. Start by locating collector-mode NetFlow/sFlow ingestion and any existing address or flow-filter configuration. Confirm the behavior against the listed local-network pairs, including discarding flows with an external source or destination.
Written by the indexing model from the issue text.
Assessment
- Domain
- networking
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100