Hi,
I am using nprobe to convert from sflow to netflow v9 and send it to
logstash.
I am facing a problem with the fact that logstash see all flows from
127.0.0.1 and I cant identify the source host for the sflow data.
I know I can run multiple nprobe process with diffarent ports but I dont
want to go this way.
Is there any way to export the flows with a spoofed source IP of the sflow
source or add a field that include the source host
Thanks
Nitzan
I am using nprobe to convert from sflow to netflow v9 and send it to
logstash.
I am facing a problem with the fact that logstash see all flows from
127.0.0.1 and I cant identify the source host for the sflow data.
I know I can run multiple nprobe process with diffarent ports but I dont
want to go this way.
Is there any way to export the flows with a spoofed source IP of the sflow
source or add a field that include the source host
Thanks
Nitzan