Security

Hello,

I have a question about IPFIX collection. There is a comprehensive documentation related to configuring all kinds of *flow on MX series, but no info about collectors. We are using flow-capture at this moment and it doesn't seem to support ipfix.

What collectors do you use? Please, advice some free collector which works on linux.

Thanks in advance.

Kindly post this query in routing section for quick response.

--Cheers,

Dipanshu

The IPFIX export from the Juniper MX series has been tested with Scrutinizer and it works well.

Jake

Hi,

You can use STRM also for flow collector also.

Best Regards,

Suresh

JNCIP-ENT,JNCIS-SEC

Nfdump seems to work fine, but since it is be better for me to keep existing collector (flow-capture) and it doesn't support ipfix, i found a workaround:

nfcapd -t 300 -z -D -p 9999 -l /home/dmsh/netflow/nfcapd/ -x 'nfreplay -r %d/%f -p 9998'

It listens to ipfix on port 9999, converts it to netflow v5 and sends to flow-capture which is running on port 9998.

Probably it is not the best solution, just optimal in my case. For new installations, better use nfdump.

The problem is solved, thanks to everyone.

Hello,  

This post on Juniper IPFIX Support provides a config and a video showing the types of reports you can generate with the new IPFIX export from the MX series.

I hope this helps.

Mike