Thank you for the link. I downloaded the gpl-archive of the EdgeMax. (The download is 530MB not 70MB).
In the vyatta-netflow_0.34.4.tgz package the commands were in the scripts/vyatta-netflow.pl . Combining the tables from “sub acct_get_table_chain” with the commands in “sub acct_add_ulog_target” I was able to extract:
iptables -t filter -I VYATTA_POST_FW_IN_HOOK 1 -o eth0.2 -j ULOG --ulog-nlgroup 2 --ulog-cprange 64 --ulog-qthreshold 10
iptables -t filter -I VYATTA_POST_FW_FWD_HOOK 1 -o eth0.2 -j ULOG --ulog-nlgroup 2 --ulog-cprange 64 --ulog-qthreshold 10
iptables -t filter -I VYATTA_POST_FW_OUT_HOOK 1 -o eth0.2 -j ULOG --ulog-nlgroup 2 --ulog-cprange 64 --ulog-qthreshold 10
In my case eth0.2 is the inward facing interface. Success!! Now egress netflows are displayed in my netflow collector/analyzer.
How can this be integrated into VyOS so that it is possible to do it via the standard configuration procedure?
I am ready to help, just don’t know where to start.