softflowd is a software flow-based network monitor. It tracks network traffic flows, reports aggregate statistics, and optionally exports Cisco Netflow compatible datagrams (to unicast hosts or multicast groups). It can listen on a promiscuous network interface or read store pcap capture files, and includes a sophisticated control interface.
|Tags||Networking Monitoring Utilities|
|Operating Systems||POSIX Linux BSD OpenBSD|
Release Notes: Manual sending of NetFlow v.9 template refreshes is now supported. ICMP type/code is now encoded into port numbers, similar to some Cisco products. Lower-resolution tracking of flows (ignoring port or protocol information) was implemented for high-bandwidth users. Several small but important bugfixes were made.
Release Notes: This release adds support for NetFlow export to multicast group addresses. There are several bugfixes.
Release Notes: This release added IPv6 flow tracking and NetFlow v.9 export support.
Release Notes: This release added NetFlow v5 export format to softflowd and the sample Perl NetFlow collector.
Release Notes: This version now drops privileges and chroots to an empty directory, reducing potential impact of any vulnerabilities. It improves the supplied Perl NetFlow collector, adding more useful output and IPv6 listen support. It also improves performance, adds a separate timeout for ICMP traffic, adds support for exporting flows to an IPv6 host, adds preliminary Solaris 9 support, and fixes many bugs.