It probably would. I thought of it, but I'm not all that familiar with
the storage requirements to gather netflow data. My initial impression
was that it was rather large. I know at work we have a dedicated machine
with a LOT of fast disk on it to gather and accumulate the netflow data
from the various building and border routers. There is also the issue
of how do you define a flow when all you ever see is stateless datagrams.
At this point the router is not looking inside the packets it forwards.
I'll have to look into it.
- Brian
On Wed, May 03, 2017 at 08:45:19AM +0000, Ruben ON3RVH wrote:
Would Netflow not sort this out?
There are open source packages for collecting Netflow data, that way you have a better
understanding of the traffic passing to each gateway and protocols they pass
73,
Ruben - ON3RVH