softflowd
softflowd is a software flow-based network monitor. It tracks network traffic flows, reports aggregate statistics, and optionally exports Cisco Netflow compatible datagrams (to unicast hosts or multicast groups). It can listen on a promiscuous network interface or read store pcap capture files, and includes a sophisticated control interface.
| Tags | Networking Monitoring Utilities |
|---|---|
| Licenses | BSD Revised |
| Operating Systems | POSIX Linux BSD OpenBSD |
| Implementation | C |
Recent releases
- 02 Nov 2006 02:09
Changes: Manual sending of NetFlow v.9 template refreshes is now supported. ICMP type/code is now encoded into port numbers, similar to some Cisco products. Lower-resolution tracking of flows (ignoring port or protocol information) was implemented for high-bandwidth users. Several small but important bugfixes were made.
- 16 Jan 2005 22:37
Changes: This release adds support for NetFlow export to multicast group addresses. There are several bugfixes.
- 30 Sep 2004 00:07
Changes: This release added IPv6 flow tracking and NetFlow v.9 export support.
- 03 Sep 2004 20:49
Changes: This release added NetFlow v5 export format to softflowd and the sample Perl NetFlow collector.
- 30 Apr 2004 00:16
Changes: This version now drops privileges and chroots to an empty directory, reducing potential impact of any vulnerabilities. It improves the supplied Perl NetFlow collector, adding more useful output and IPv6 listen support. It also improves performance, adds a separate timeout for ICMP traffic, adds support for exporting flows to an IPv6 host, adds preliminary Solaris 9 support, and fixes many bugs.
