Re: Suricata Netflow export into ntopng
Luca Deri <[email protected]> Mon, 24 Jun 2019 16:57:42 +0200
| Newsgroups | gmane.linux.ntop.general |
|---|---|
| Message-ID | <[email protected]> |
--===============5500360302746876251== Content-Type: multipart/alternative; boundary=Apple-Mail-82F14491-22A2-46FE-AF7C-9407440DC2EA Content-Transfer-Encoding: 7bit --Apple-Mail-82F14491-22A2-46FE-AF7C-9407440DC2EA Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hi Please see https://github.com/ntop/ntopng/blob/dev/doc/README.suricata Regards Luca=20 > On 24 Jun 2019, at 15:36, "[email protected]" <[email protected]> wrote: >=20 > Hello,=20 >=20 > I am trying to see if we can export NetFlow data from Suricata and add the= m either to Nprobe or directly into ntopng ?=20 >=20 > Suricata seems to have a the ability to export flows directly in redis for= mat.=20 > But I am not sure if ntopng has the ability to collect the JSON formated f= lows and store them directly in Redis or if we rather have to use Nprobe as a= middleware formater.=20 >=20 >=20 > Any help is welcome.=20 >=20 >=20 > Sincerely yours.=20 > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop --Apple-Mail-82F14491-22A2-46FE-AF7C-9407440DC2EA Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D= utf-8"></head><body dir=3D"auto"><div dir=3D"ltr"></div><div dir=3D"ltr">Hi<= /div><div dir=3D"ltr">Please see <a href=3D"https://github.com/ntop/nto= png/blob/dev/doc/README.suricata">https://github.com/ntop/ntopng/blob/dev/do= c/README.suricata</a></div><div dir=3D"ltr"><br></div><div dir=3D"ltr">Regar= ds Luca </div><div dir=3D"ltr"><br>On 24 Jun 2019, at 15:36, "<a href=3D= "mailto:[email protected]">[email protected]</a>" <<a href=3D"mailto:[email protected]= z">[email protected]</a>> wrote:<br><br></div><blockquote type=3D"cite"><div d= ir=3D"ltr"><span>Hello, </span><br><span></span><br><span>I am trying to see= if we can export NetFlow data from Suricata and add them either to Nprobe o= r directly into ntopng ? </span><br><span></span><br><span>Suricata seems to= have a the ability to export flows directly in redis format. </span><br><sp= an>But I am not sure if ntopng has the ability to collect the JSON formated f= lows and store them directly in Redis or if we rather have to use Nprobe as a= middleware formater. </span><br><span></span><br><span></span><br><span>Any= help is welcome. </span><br><span></span><br><span></span><br><span>Sincere= ly yours. </span><br><span>_______________________________________________</= span><br><span>Ntop mailing list</span><br><span><a href=3D"mailto:Ntop@list= gateway.unipi.it">[email protected]</a></span><br><span><a href=3D"h= ttp://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.i= t/mailman/listinfo/ntop</a></span><br></div></blockquote></body></html>= --Apple-Mail-82F14491-22A2-46FE-AF7C-9407440DC2EA-- --===============5500360302746876251== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop --===============5500360302746876251==--