Press J to jump to the feed. Press question mark to learn the rest of the keyboard shortcuts
0

Help needed in collecting Netflow data on non-CISCO router

I need help in collecting netflow data on a TP Link router with the default firmware. I am currently using tshark and getting the PCAP files which I can convert to CSV or any other format. I am facing issues in converting the PCAP files to netflow format. Can anyone suggest any way of collecting netflow data on my router or a good way of converting PCAP to Netflow format?

Any help is highly appreciated. Thanks!

7 comments
14% Upvoted
What are your thoughts? Log in or Sign uplog insign up
level 1
Moderator | Infrastructure Architect5 points · 3 months ago

nTop + nProbe.

level 2
Original Poster1 point · 3 months ago

I'm not sure, but is nProbe free to use? Doesn't it have a limit on the number of flows collected in the community edition?

level 3
Moderator | Infrastructure Architect1 point · 3 months ago

I think you'd be better served asking those questions of the nTop dev team or message boards.

level 1

You will be better off doing something like ntopng instead. Trying to convert pcaps to netflow on the fly is going to be painful.

level 2
Original Poster1 point · 3 months ago

Can you please help me in using ntopng to convert pcap to netflow? I've searched the internet, and I couldn't find anything helpful. PS: I'm new to network traffic collection.

level 1
CCIE #19371 point · 3 months ago

There's an old app called "softflowd" that can convert PCAP files to netflow format, but it appears to be *nix-based. I also found a Python program called "pcap-converter" that claims to be able to do the same thing. I've never used either of these tools before, so I can't speak to how well they may or may not work.

Hope this helps - Good luck!

level 1
obsessed with NetKAT1 point · 3 months ago

will pmacct fit? try to get pmacct to fit on your LEDE/OpenWRT image.

Community Details

131k

Subscribers

900

Online

###Enterprise Networking Routers, switches and firewalls. Network blogs, news and network management articles. Cisco, Juniper, Brocade and more all welcome.

Create Post
r/networking Rules
1.
Rule #1: No Home Networking.
2.
Rule #2: No Certification Brain Dumps / Cheating.
3.
Rule #3: No BlogSpam / Traffic re-direction.
4.
Rule #4: No Low Quality Posts.
5.
Rule #5: No Early Career Advice.
6.
Rule #6: Educational Questions must show effort.
Cookies help us deliver our Services. By using our Services or clicking I agree, you agree to our use of cookies. Learn More.