pfSense NetFlow stats

Limitations

• Does not work very well with IPv6

Installation

A PostgreSQL database is required (e.g. docker run --rm -p 5432:5432 postgres:11). The default config uses database ipfix, username ipfix and password ipfix on localhost. This can be changed in alembic.ini and models/__init__.py. The database ipfix needs to have the extension uuid-ossp enabled:

CREATE EXTENSION IF NOT EXISTS "uuid-ossp";

Create a virtual environment based on requirements.txt.

To initialize the database:

PYTHONPATH=. alembic upgrade head

To start:

python collect.py
python parse.py
python visual.py

On a regular basis (e.g. every minute):

python summary.py

By default the service listens on all interfaces on port 9000.