{"id":122015,"date":"2025-02-20T14:22:14","date_gmt":"2025-02-20T12:22:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02"},"modified":"2025-02-20T14:22:14","modified_gmt":"2025-02-20T12:22:15","slug":"vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","title":{"rendered":"Release of Xenoeye Netflow\/IPFIX\/sFlow Collector 25.02","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>The release of the Xenoeye Netflow\/IPFIX\/sFlow Collector 25.02 has been published. The collector allows collecting traffic flow statistics from various network devices transmitted using Netflow v5, v9, IPFIX, and sFlow protocols, processing the data, generating reports, and creating graphs. The core of the project is written in C, and the code is distributed under the ISC license.    <\/p>\n<p>The collector aggregates network traffic based on selected fields and exports the data to PostgreSQL. Reports and graphs can be constructed from this data (using gnuplot, or scripts in Python + Matplotlib) or dashboards in Grafana. Additionally, the collector can execute custom scripts when thresholds are exceeded or when traffic drops below thresholds.   <center><img decoding=\"async\" alt=\"Release of Xenoeye Netflow\/IPFIX\/sFlow Collector 25.02\" src=\"\/wp-content\/uploads\/2025\/02\/14036e9ad0314171ccf650634a98353e.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>To calculate the current traffic speed, sliding averages are used. The mechanism that monitors threshold breaches is designed to alert about DoS\/DDoS attacks and trigger suppression using BGP announcements (Flowspec or Blackhole). Included with the collector is an example of a Telegram bot script that can notify the messenger about anomalies. The collector is not resource-intensive and can process traffic from small networks on a Raspberry\/Orange Pi or in a virtual machine with 2-4GB of RAM.      <\/p>\n<p>Changes in the new version:  <\/p>\n<ul>\n<li class=\"l\"> Support for the sFlow protocol has been added, which includes the ability to parse the payload of network packets and extract information about DNS and TLS (HTTPS) SNI. Hosting providers and data center owners can use this capability to combat phishing and assess which <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/en\/domain\/\"   title=\"domains\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4065\">domains<\/a> and websites are hosted on the network.\n<li class=\"l\"> Support for nested\/hierarchical monitoring objects has been added, allowing for easier configuration of setups with a large number of objects and improving processing performance compared to a 'flat' list of monitoring objects.\n<li class=\"l\"> The ability to classify interfaces has been added \u2014 traffic from selected network interfaces of routers or switches can be ignored or processed in a special way.\n<li class=\"l\"> It is now possible to monitor not only traffic spikes but also drops below thresholds, which can be useful for indirect monitoring of individual <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/en\/server\/\"   title=\"servers\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1750\">servers<\/a> or services.\n<li class=\"l\"> The ability to change traffic thresholds without restarting the collector has been added. This mechanism is designed for situations where users automatically calculate thresholds based on statistics from previous periods and periodically update the thresholds in the collector.\n<li class=\"l\"> An LXC container has been added for rapid deployment and testing of the collector. The container includes the collector with pre-installed monitoring objects, PostgreSQL, and Grafana.  <\/ul>\n<p>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62757\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02. \u041a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0441 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443 \u043e \u043f\u043e\u0442\u043e\u043a\u0430\u0445 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u0443\u044e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Netflow v5, v9, IPFIX \u0438 sFlow, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442\u044b \u0438 \u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0433\u0440\u0430\u0444\u0438\u043a\u0438. \u042f\u0434\u0440\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421, \u043a\u043e\u0434 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 ISC. \u041a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440 \u0430\u0433\u0440\u0435\u0433\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043f\u043e \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044f\u043c \u0438 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":122016,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-122015","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-02-20T12:22:15+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-02-20T12:22:15+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Release of Netflow\/IPFIX\/sFlow collector Xenoeye 25.02 | ProHoster","description":"The release of the Netflow\/IPFIX\/sFlow collector Xenoeye 25.02 has been published.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 Netflow\/IPFIX\/sFlow \u043a\u043e\u043b\u043b\u0435\u043a\u0442\u043e\u0440\u0430 Xenoeye 25.02.","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-02-20T12:22:15+00:00","article:modified_time":"2025-02-20T12:22:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"122015","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:14:38","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 10:45:42","updated":"2026-03-05 11:14:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/122015","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=122015"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/122015\/revisions"}],"predecessor-version":[{"id":163168,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/122015\/revisions\/163168"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/122016"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=122015"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=122015"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=122015"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}