README
¶
flowhouse
Flowhouse is a Clickhouse based sFlow collector and web based analyzer that offers rich annotation and querying features.
It is planned to add support for IPFIX/Netflow version 9. Packet decoder to be taken from github.com/bio-routing/tflow2. Patches adding support are very welcome!
Interface Name Discovery
Discovery of interface names is supported using SNMP. The database always stores interface namens. Not IDs.
Static Meta Data Annotations
Static meta data annotations are supported by the use of Clickhouses dicts.
Dynamic Routing Meta Data Annotations
Dynamic routing meta data annotations like source and destination prefix, source, destination and nexthop ASN are supported on the basis of the BIO routing RIS.
Installation
go get github.com/bio-routing/flowhouse/cmd/flowhouse
go install github.com/bio-routing/flowhouse/cmd/flowhouse
Configuration
We have not documentation about this yet. But the config format is defined here: https://github.com/bio-routing/flowhouse/blob/master/cmd/flowhouse/config/config.go#L21
Running it
user@host ~ % flowhouse --help
Usage of flowhouse:
-config.file string
Config file path (YAML) (default "config.yaml")
Directories
¶
| Path | Synopsis |
|---|---|
|
cmd
|
|
|
pkg
|
|
|
frontend
Package frontend generated by go-bindata.// sources: assets/flowhouse.js assets/index.html
|
Package frontend generated by go-bindata.// sources: assets/flowhouse.js assets/index.html |
|
packet/ipfix
Package ipfix provides structures and functions to decode and analyze IPFIX packets.
|
Package ipfix provides structures and functions to decode and analyze IPFIX packets. |
|
packet/nf9
Package nf9 provides structures and functions to decode and analyze NetFlow v9 packets.
|
Package nf9 provides structures and functions to decode and analyze NetFlow v9 packets. |
|
servers/sflow
Package sfserver provides sflow collection services via UDP and passes flows into aggregator layer
|
Package sfserver provides sflow collection services via UDP and passes flows into aggregator layer |