Hi.
Even compiling with the --enable-netflow parameter, suricata does not provide the functionality - suricata --build-info | grep netflow.
Is this a bug? Doesn’t suricata have integration with netflow data exported by routers?
Hi.
Even compiling with the --enable-netflow parameter, suricata does not provide the functionality - suricata --build-info | grep netflow.
Is this a bug? Doesn’t suricata have integration with netflow data exported by routers?
Suricata’s netflow about producing netflow style logs, but in JSON format.
It will not read netflow output from other devices. Also, there is no --enable-netflow
parameter. See ./configure --help
for a list of available parameters.