Monitoring Pfsense Network Traffic

[jeongjw]

Hello
I'm in charge of infrastructure for one company.

I got to write something to ask, and I would appreciate it if you could comment or chat me if you have anything to refer to!

Like Pfsense's ntopng, I want to check the source IP, destination IP, number of packets, and traffic volume on Zabbix
I have no idea which item key value to use with Zabbix..

If you look at Google's answer, they tell you to use H5 Flow, but it's hard to find exactly what it means,
It is supposed to use zabbix_sender on the zabbix server to send the value of the sflowd as a script, but even this method is not properly guided..
I'd like to hear from seniors if Zabbix can use it as above, not as a total traffic volume.

Thank you.

[irontmp]

Hello
I'm in charge of infrastructure for one company.

I got to write something to ask, and I would appreciate it if you could comment or chat me if you have anything to refer to!

Like Pfsense's ntopng, I want to check the source IP, destination IP, number of packets, and traffic volume on Zabbix
I have no idea which item key value to use with Zabbix..

If you look at Google's answer, they tell you to use H5 Flow, but it's hard to find exactly what it means,
It is supposed to use zabbix_sender on the zabbix server for Royally Rummy to send the value of the sflowd as a script, but even this method is not properly guided..
I'd like to hear from seniors if Zabbix can use it as above, not as a total traffic volume.

Thank you.

To monitor source IP, destination IP, number of packets, and traffic volume on Zabbix similar to Pfsense's ntopng, you can use SNMP or custom scripts. Enable SNMP on your devices, create SNMP items in Zabbix with the appropriate OID values, or write custom scripts to collect and send this data to Zabbix using the Zabbix agent. Integration with sFlow or NetFlow is also an option for more detailed traffic monitoring.

[jeongjw]

Hello, irontmp

Can you give me an example of snmp or custom script?

[jeongjw]

I want to create traffic collected in this way on the dashboard.

I would appreciate it if you could give me an example of processing the data on the dashboard and a guide on how to make it.

Sources : https://youtu.be/cfBU690VXVQ?si=glWgcK5U4sY_UnBd

[cyber]

If you look at Google's answer, they tell you to use H5 Flow, but it's hard to find exactly what it means,

I think they mean this https://www.zabbix.com/integrations/netflow_sflow