Flow monitoring in Linux?

Question

linux

Colleagues, good afternoon.

Please tell me a way to collect flow traffic from servers.

Task:
there are several virtual machines in the cloud, there is no access to the network infrastructure.
I want to see and collect flows from servers in order to see which addresses the traffic is coming from.

a good example is ntop, but you will have to install your own for each virtual machine, and this is not very convenient.

I looked in the direction of fastnetmon, however, there were problems with it: it transfers data from the virtuac over traffic, but does not provide complete information - which addresses, which ports, etc.

I collect traffic information from home servers at the network level via netflow and send it to elasticflow, which is very convenient.

I would like to find a similar thing for virtual machines (once again - a good example of ntop, but it does not know how to export flow to fastnetmon).

Suggest a solution, please. Or am I looking in the right direction?

The bundle was invented like this:
https://fastnetmon.com/install/ - stands on the aggregation server
https://fastnetmon.com/docs-fnm-advanced/fastnetmo... - on the end nodes. however, again, I do not receive information on specific traffic

Answer 1

pmacct is
a powerful traffic accounting tool