Re: is this possible? Edgmax as man-in-the-middle to capture network traffic and send it with netflo

some other information: at least my netflow config is correct: on my capture machine (192.168.4.54), I see incomming packets: 



But it seems a broadcast from the Edgemax itself (192.168.4.5) to port 10001.

Probably ubnt-discover

https://community.ubnt.com/t5/EdgeMAX/UDP-broadcasts-on-port-10001/td-p/461223

configure
set service ubnt-discover disable
commit
save
exit

So main question remains: why is this bridge configuration not logging my network traffic with netflow (although it seems to be capable to do dpi traffic analysis)

Is this a problem of my config, or is it a problem with netflow?

Current netflow config:

ubnt@ubnt# show system flow-accounting
 ingress-capture pre-dnat
 interface eth4
 netflow {
     enable-egress {
     }
     server 192.168.4.54 {
         port 2055
     }
     version 9
 }
 syslog-facility daemon

any help is much appreciated!

Bart