NAME¶

samplicator - UDP packets forwarder and duplicator

SYNOPSIS¶

samplicator [-p port] [-s address] [-d level] [-b size] [-n] [-S] [-x delay] [-c config] [-f] [-h] A.B.C.D[/port[/freq][,ttl]]

DESCRIPTION¶

samplicator is simple program listens for UDP datagrams (NetFlow, sFlow, SNMP Trap, Syslog) on a network port, and sends copies of these datagrams on to a set of destinations. Optionally, it can perform sampling, i.e. rather than forwarding every packet, forward only 1 in N. Another option is that it can "spoof" the IP source address, so that the copies appear to come from the original source, rather than the relay.

OPTIONS¶

The following command-line options are accepted by the server:

-p port

UDP port to accept flows on. Default - 2000.

-s address

interface address to accept flows on. Default - any.

-d level

debug level

-b size

set socket buffer size. Default - 65536.

-n

don't compute UDP checksum (leave at 0)

-S

maintain (spoof) source addresses

-x delay

transmit delay in microseconds

-c config

specify a config file to read

-f

fork program into background

-h

print this usage message and exit

A.B.C.D

is the receiver's IP address

port

is the UDP port to send to. Default - 2000.

freq

is the sampling rate. Default - 1.

ttl

is the sending packets TTL value. Default - 64.

CONFIG¶

A.B.C.D[/E.F.G.H]: receiver

A.B.C.D

is the senders IP address

E.F.G.H

is a mask to apply to the sender. Default - 255.255.255.255.

receiver

is the IP address of receiver

NOTES¶

samplicator currently only supports IPv4.

Receivers specified on the command line will get all packets, those specified in the config will get only packets with a matching source.

FILES¶

/usr/sbin/samplicate

AUTHOR¶

samplicator was originally written by Simon Leinen <simon.einen@gmail.com>.

This manual page was written by Vladimir Pavljuchenkov <spiderx@spiderx.dp.ua> for Gentoo Linux (and may be used by others)