Page MenuHomeFreeBSD

rc.d: Add ipfw_netflow
ClosedPublic

Authored by manu on Jun 28 2017, 8:33 AM.
Tags
None
Referenced Files
Unknown Object (File)
Nov 24 2025, 11:58 PM
Unknown Object (File)
Nov 11 2025, 9:27 PM
Unknown Object (File)
Nov 11 2025, 12:41 PM
Unknown Object (File)
Nov 10 2025, 9:50 PM
Unknown Object (File)
Nov 4 2025, 8:46 PM
Unknown Object (File)
Oct 23 2025, 10:08 AM
Unknown Object (File)
Oct 23 2025, 9:55 AM
Unknown Object (File)
Oct 7 2025, 9:21 AM
Subscribers

Details

Reviewers
bapt
olivier
Summary

Add an rc.d script to setup a netflow export via ng_netflow
The default is to export netflow data on localhost on the netflow port.
ngtee is used to have the lowest overhead possible.
The ipfw ng hook is the netflow port (it can only be numeric)
Default is netflow version 5.

Sponsored-By: Gandi.net

Test Plan

Tested on router that nat etc ...

Diff Detail

Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 10301
Build 10718: arc lint + arc unit

Event Timeline

I like it: It's work :-)
Some potential improvement:

  • allowing to configure just the rule number (01000) in place of having to declaring the full rule line
  • Cosmetic: Setting a name to the ksocket, like export-flow or something like that (it just help to describe a little-better the graphiz).

Add checks on hook and rule params.
Rule now is only the rule number, easier to customize existing ipfw setup.
Name the ksocket so graph generated by ngctl dot is prettier.

This revision is now accepted and ready to land.Jun 29 2017, 11:30 AM
manu edited edge metadata.

Add checks and status command

This revision now requires review to proceed.Jul 4 2017, 2:27 PM
This revision is now accepted and ready to land.Aug 9 2017, 11:25 AM