Multiplexer

From IPFlow Netflow Collector

The multiplexer feature (introduced in 0.49.8.7 release) allows multiple netflow streams to be received on a single UDP port. It is possible to use more than one multiplexer in a collector instance.

In the following example, two routers (R1 and R2) are configured to export Netflow-v5 datagrams to an IPFlow collector instance, on port 50000. The multiplexer "M1" dispatches data between R1 and R2, based on the source IP address seen in datagrams. The IP addresses used by each router for export must be specified in the "export-addresses" section.

The statement "show-unknown-addr yes;" allows the user to see unrecognized source IP addresses of Netflow packets. To enhance performance, it is possible to start many threads per multiplexer, using the "threads <thread_number>;" statement.

router R1 {
    ip-address 10.0.0.1;
    snmp-community netflow;

    export-addresses {
        10.0.0.1;
        10.128.1.2;
    };

    netflow {
        version 5;
    };

    rule r1;
};

router R2 {
    ip-address 10.0.0.2;
    snmp-community netflow;

    export-addresses {
        10.0.0.2;
        10.129.3.2;
    };

    netflow {
        version 5;
    };

    rule r1;
};

multiplexer M1 {
    netflow {
        receiver-port 50000;
    };

    threads 10;
    show-unknown-addr yes;
};

rule r1 {
    term 1 {
        color yellow;
    };
};