Flewton

Flewton is an extensible Netflow collector.

Refer to the comments in the sample configuration shipped with Flewton.

In a nutshell:

java [options] -jar flewton.jar

By default, Flewton will search for its configuration file as /etc/flewton/flewton.cfg, /etc/flewton.cfg, and ./flewton.cfg, using the first one found. You can specify a path to your configuration using the flewton.config system property, for example:

java -Dflewton.config=/usr/local/etc/flewton.cfg -jar flewton.jar

Flewton uses log4j for logging. By default, the log level is INFO and output is sent to stdout. To customize logging, create your own log4j.properties and set the log4j.configuration system property:

java -Dlog4j.configuration=file:///path/to/log4.props -jar flewton.jar

• Currently only Netflow v5 is supported, but additional Netflow formats are possible by implementing decoder classes as com.rackspace.flewton.RecordvN (where N is the version). See com.rackspace.flewton.Recordv5 for an example. Patches welcome.

Flewton was developed by Gary Dusbabek and Eric Evans and open-source by Rackspace.