{"id":122015,"date":"2025-02-20T14:22:14","date_gmt":"2025-02-20T12:22:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02"},"modified":"2025-02-20T14:22:14","modified_gmt":"2025-02-20T12:22:15","slug":"vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","title":{"rendered":"Udgivelse af Netflow\/IPFIX\/sFlow samler Xenoeye 25.02","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Udgivelsen af Netflow\/IPFIX\/sFlow samler Xenoeye 25.02 er offentliggjort. Samleren g\u00f8r det muligt at indsamle statistik om trafikstr\u00f8mme fra forskellige netv\u00e6rksenheder, der sendes ved brug af protokoller som Netflow v5, v9, IPFIX og sFlow, behandle data, generere rapporter og opbygge grafer. Projektets kerne er skrevet i C, og koden distribueres under ISC-licensen.    <\/p>\n<p>Samleren aggregerer netv\u00e6rkstrafik efter valgte felter og eksporterer data til PostgreSQL. P\u00e5 baggrund af disse data kan man opbygge rapporter, grafer (ved brug af gnuplot, scripts i Python + Matplotlib) eller dashboards i Grafana. Derudover kan samleren k\u00f8re brugerdefinerede scripts, n\u00e5r t\u00e6rskler overskrides eller n\u00e5r trafikken falder under t\u00e6rsklerne.   <center><img decoding=\"async\" alt=\"Udgivelse af Netflow\/IPFIX\/sFlow samler Xenoeye 25.02\" src=\"\/wp-content\/uploads\/2025\/02\/14036e9ad0314171ccf650634a98353e.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>Til beregning af den aktuelle trafik hastighed anvendes glidende gennemsnit. Mekanismen, der overv\u00e5ger overskridelse af t\u00e6rskler, er beregnet til at advare om DoS\/DDoS-angreb og starte undertrykkelse ved hj\u00e6lp af BGP-annoncer (Flowspec eller Blackhole). Samleren leveres med et eksempel p\u00e5 et Telegram-bot-script, der kan advare i messenger om anomalier. Samleren kr\u00e6ver ikke mange ressourcer, da den kan behandle trafik fra sm\u00e5 netv\u00e6rk p\u00e5 Raspberry\/Orange Pi eller i en virtuel maskine med 2-4 GB RAM.      <\/p>\n<p>\u00c6ndringer i den nye version:  <\/p>\n<ul>\n<li class=\"l\"> Underst\u00f8ttelse af sFlow-protokollen er blevet tilf\u00f8jet, hvor der er implementeret mulighed for at parre indholdet (payload) af netv\u00e6rkspakker og udtr\u00e6kke information om DNS og TLS (HTTPS) SNI. Hostingudbydere og datacenter ejere kan bruge denne funktion til at bek\u00e6mpe phishing og vurdere, hvilke <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/da\/domain\/\"   title=\"domains\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4065\">domains<\/a> og hjemmesider der hostes i netv\u00e6rket.\n<li class=\"l\"> Underst\u00f8ttelse af indlejrede\/hierarkiske overv\u00e5gningsobjekter er blevet tilf\u00f8jet, hvilket forenkler nogle konfigurationer med mange objekter og forbedrer behandlingsydelsen sammenlignet med en &#171;flad&#187; liste over overv\u00e5gningsobjekter.\n<li class=\"l\"> Muligheden for klassificering af gr\u00e6nseflader er blevet tilf\u00f8jet - trafikken fra udvalgte netv\u00e6rksgr\u00e6nseflader p\u00e5 routere eller switches kan ignoreres eller behandles p\u00e5 en s\u00e6rlig m\u00e5de.\n<li class=\"l\"> Muligheden for at overv\u00e5ge ikke kun spikes i trafikken, men ogs\u00e5 fald under t\u00e6rskler, er blevet tilf\u00f8jet, hvilket kan v\u00e6re nyttigt til indirekte overv\u00e5gning af individuelle <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/da\/server\/\"   title=\"servere\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1750\">servere<\/a> eller tjenester.\n<li class=\"l\"> Muligheden for at \u00e6ndre trafikgr\u00e6nser uden genstart af indsamleren er blevet tilf\u00f8jet. Mekanismen er designet til situationer, hvor brugere automatisk beregner gr\u00e6nser baseret p\u00e5 tidligere perioders statistik og periodisk opdaterer gr\u00e6nserne i indsamleren.\n<li class=\"l\"> En LXC-container til hurtig implementering og test af indsamleren er blevet tilf\u00f8jet. Containeren indeholder indsamleren med forudinstallerede overv\u00e5gningsobjekter, PostgreSQL og Grafana.  <\/ul>\n<p>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62757\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02. \u041a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443 \u043e \u043f\u043e\u0442\u043e\u043a\u0430\u0445 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u0443\u044e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Netflow v5, v9, IPFIX \u0438 sFlow, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442\u044b \u0438 \u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0433\u0440\u0430\u0444\u0438\u043a\u0438. \u042f\u0434\u0440\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421, \u043a\u043e\u0434 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 ISC. \u041a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440 \u0430\u0433\u0440\u0435\u0433\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043f\u043e \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044f\u043c \u0438 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":122016,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-122015","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-02-20T12:22:15+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-02-20T12:22:15+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Udgivelse af Netflow\/IPFIX\/sFlow-indsamleren Xenoeye 25.02 | ProHoster","description":"Udgivelsen af Netflow\/IPFIX\/sFlow-indsamleren Xenoeye 25.02 er offentliggjort.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-02-20T12:22:15+00:00","article:modified_time":"2025-02-20T12:22:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"122015","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:14:38","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 10:45:42","updated":"2026-03-05 11:14:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/122015","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=122015"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/122015\/revisions"}],"predecessor-version":[{"id":163168,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/122015\/revisions\/163168"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/122016"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=122015"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=122015"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=122015"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}