Hello,
in short - would it be possible to also include “Reply source address/port” and “Reply destination address/port” in Netflow packets generated by mikrotik routers?
The reason is that when doing a NAT, netflow monitoring gets largely useless because of the fact that the two entries most precious for actual searching for any data are missing.
IPT Netflow (http://sourceforge.net/projects/ipt-netflow/) does a similar thing with accounting of NAT events.
If there is some way to get this information from current routeros versions, please give advice :]
Thanks in advance,
-mk