Anyone tried using Insight Network Sensor with SONiC/gNMI or NetFlow?

InsightIDR
1

Hey everyone,

Quick question — has anyone here tried integrating the Insight Network Sensor with SONiC switches that use gNMI/gRPC telemetry instead of traditional port mirroring?

We’re exploring a setup where the network only exports telemetry and NetFlow/IPFIX data on demand (when anomalies are detected), rather than full mirrored traffic all the time.

From what I’ve seen, the sensor expects a raw packet stream (SPAN/TAP), but I was wondering if anyone has managed to feed it NetFlow or similar flow-based data, or if there’s any unofficial workaround for this.

Appreciate any insight or experience you can share! :folded_hands:

2

We have not. We setup our sensors the traditional way with a TAP

3

we are implementing some new switches that allows gnmi and could be nice to use it as we were having performance issues with traditional port mirror…