Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -1 down vote favorite

is it possible to capture only one subnet of netflow traffic? For instance: If a switch processes traffic of the subnet 10.1.x.x and 10.2.x.x, would it be possible to capture only traffic of 10.2.x.x ?

Actually I am using softflowd to capture netflow traffic and it would be best to restrict it only to one subnet directly. Alternatively: Is there a way to export only those netflows of a specific subnet (e.g. with flow-export from flowtools)?

Thanks for your help! Cheers

share|improve this question
Hi there, this isn't a security question, but is a configuration question. Have a look at serverfault.com - they probably have this question answered already. – Rory Alsop♦ Jan 17 at 16:31

closed as off topic by GdD, Rory Alsop♦ Jan 17 at 16:30

Questions on IT Security Stack Exchange are expected to relate to IT security within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.

1 Answer

up vote 0 down vote

10.2.0.0/16 is the network you are looking for.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.