[netsa-tools-discuss] Can Juniper's j-flow(s) be used with Silk?

Mark Thomas mthomas at cert.org
Wed Mar 9 10:01:14 EST 2016


Evgeniy-

Thank you for your offer.

A pcap file generated by tcpdump would be most helpful and very
appreciated.

Thanks again!

-Mark


On Wed, 9 Mar 2016 13:10:48 +0100, Evgeniy Sudyr wrote:

> Mark, thank you for answering!
>
> I can help in testing by submitting some flows traffic dump from
> devices I have?
>
> Please suggest what will be best format / tools to provide flows .pcap
> from tcpdump is OK?
>
> ---
> Evgeniy
>
> On Tue, Mar 8, 2016 at 5:01 PM, Mark Thomas <mthomas at cert.org> wrote:
>> Evgeniy-
>>
>> We know that J-Flow v9 is based on RFC 3954 (NetFlow v9), but we do
>> not have samples of J-Flow that we can use to test our tools.
>>
>> You may be able to collect traffic by configuring the probe's type
>> as "netflow-v9".  Depending on the templates used by J-Flow, it is
>> possible that rwflowpack will be able to see the flow records but it
>> may not store them.
>>
>> -Mark
>>
>>
>> -----Original Message-----
>> From: Evgeniy Sudyr <eject.in.ua at gmail.com>
>> Date: Mon, 7 Mar 2016 16:18:55 +0100
>> To: <netsa-help at cert.org>
>> Cc: <netsa-tools-discuss at cert.org>
>> Subject: [netsa-tools-discuss] Can Juniper's j-flow(s) be used with Silk?
>>
>> Hi, can't get from FAQ if it's possible to get flows data from Juniper
>> j-series routers for Silk analysis?
>>
>> http://tools.netsa.cert.org/silk/faq.html
>>
>> We have j-series router with 12.1X46-D40.2 (no IPFIX support)
>> https://kb.juniper.net/InfoCenter/index?page=content&id=KB16677&actp=search
>>
>> --
>> --
>> With regards,
>> Evgeniy


More information about the netsa-tools-discuss mailing list