IP traffic graph with NetFlow (IpFlow), Pmacct and Pnrg over Linux

RouterOS General
1

Hi,

Many times I was wondering how to graph IP traffic in / out from all hosts, like “Mrtg” http://oss.oetiker.ch/mrtg/

Some times I tried queue simple graph…
other times tried by to active SNMP and use Cacti “http://www.cacti.net” or similar SNMP app

This time I think I’ve found a very simple and intresting way to graph and monitoring each IP customer host through my network by using NetFlow protocol.

I’ve wrote a tutorial with the I’ve tried and get.
I hope you enjoy it.

(by now, spanish tutorial)
http://www.netpro-ar.com/monitoreo-de-trafico-con-mikrotik-y-netflow/

I hope you enjoy

2

look very good !!!

amazing work

3

Thank you very much!

4

nice :smiley:

Using same approach with ELK (Kibana)

5

Would you mind sharing what you did to get the ELK system up and running?

Been playing a bit in the ELK arena lately - and would love to see netflows into elk

6

+1 :smiley:

7

Used this in logstash.conf (as v9 gave me errors regarding templates)

        udp {
                type => "trafflow"
                port => 12345
                codec => netflow {
                versions => 5
                }
        }

Then enable traffic flow on the RB IP > Traffic flow setting v5 and 12345 as port.

8

thanks - for some reason - today … months and months later i got the notification this was updated.
Thanks a bunch :slight_smile: