前言
sFlow采用数据流随机采样技术,可提供完整的第二层到第四层,甚至全网络范围内的流量信息,可以适应超大网络流量(如大于10Gbit/s)环境下的流量分析,让用户详细、实时地分析网络传输流的性能、趋势和存在的问题。SFLOW-RT 是sflow流分析的一个工具。
交换机配置sflow
sflow-rt
local.conf配置
dns.servers=resolv.conf
geo.country=resources/config/GeoLite2-Country.mmdb
geo.asn=resources/config/GeoLite2-ASN.mmdb
oui.names=resources/config/oui.txt
flow-trend.maxFlows=20
flow-trend.aggMode=sum
docker启动
docker run --rm -v $PWD/conf/local.conf:/sflow-rt/local.conf -v $PWD/app:/sflow-rt/app -p 6343:6343/udp -p 8008:8008 --name sflow-rt sflow/sflow-rt -Dsystem.propertyFiles=local.conf
docker-compose启动sflow-rt
version: '3'
services:
sflow-rt:
image: sflow/sflow-rt
container_name: sflow-rt
restart: always
environment:
- RTMEM=2G
ports:
- 6343:6343/udp
- 8008:8008
volumes:
- ./conf/local.conf:/sflow-rt/local.conf
- ./app:/sflow-rt/app
entrypoint:
- /sflow-rt/start.sh
- -Dsystem.propertyFiles=local.conf
networks:
- sflow
networks:
sflow:
评论 (0)