diff --git a/.gitmodules b/.gitmodules
index c1a8669..532387e 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -11,3 +11,6 @@
 [submodule "detectors"]
 	path = detectors
 	url = https://github.com/CESNET/Nemea-Detectors
+[submodule "modules-ng"]
+	path = modules-ng
+	url = https://github.com/CESNET/nemea-modules-ng
diff --git a/docker/rocky8/Dockerfile b/docker/rocky8/Dockerfile
new file mode 100644
index 0000000..f66cce4
--- /dev/null
+++ b/docker/rocky8/Dockerfile
@@ -0,0 +1,21 @@
+FROM rockylinux:8-minimal
+RUN microdnf install dnf
+RUN dnf -y install epel-release
+RUN curl -s 'https://copr.fedorainfracloud.org/coprs/g/CESNET/NEMEA/repo/epel-8/group_CESNET-NEMEA-epel-8.repo' > /etc/yum.repos.d/group_CESNET-NEMEA-epel-8.repo
+#RUN dnf -y update
+RUN dnf -y --enablerepo=devel --enablerepo=powertools install epel-rpm-macros \
+   python3-rpm-macros python-rpm-macros python-srpm-macros rpm-build git which \
+   doxygen bison flex libcurl-devel lua-devel bzip2-devel libpcap-devel \
+   ncurses-devel fuse3-devel openssl-devel libxml2-devel libidn-devel make automake \
+   autoconf pkgconfig gcc gcc-c++ libtool cmake \
+   python3-devel python3-setuptools python3-pip python3-wheel \
+   python38 python38-devel python38-pip python38-wheel python38-setuptools \
+   python39 python39-devel python39-pip python39-wheel python39-setuptools \
+   python3-jinja2 python3-ply python3-pynspect python3-yaml \
+   python3-sphinx
+
+	# python3-nemea-pytrap
+RUN dnf clean all
+
+CMD ["/bin/bash"]
+
diff --git a/docker/rocky8/README.md b/docker/rocky8/README.md
new file mode 100644
index 0000000..b83210c
--- /dev/null
+++ b/docker/rocky8/README.md
@@ -0,0 +1,14 @@
+# Explanation
+
+This directory contains `Dockerfile` to build an image based on RockyLinux8 with
+all required dependencies installed.
+
+The image can be used to create a container and build all NEMEA RPM packages
+and Python wheels.
+
+To do this, just run `build.sh`, and the results should be in `rpms/` an `wheels/`.
+
+# Requirements
+
+* podman or docker
+
diff --git a/docker/rocky8/build.sh b/docker/rocky8/build.sh
new file mode 100755
index 0000000..d2cf65d
--- /dev/null
+++ b/docker/rocky8/build.sh
@@ -0,0 +1,32 @@
+#!/bin/bash
+
+CONT_BIN="`which podman 2>/dev/null`"
+if [ -z "$CONT_BIN" ]; then
+   CONT_BIN="`which docker 2>/dev/null`"
+fi
+if [ -z "$CONT_BIN" ]; then
+   echo "Missing podman or docker."
+   exit 1
+fi
+
+"$CONT_BIN" build --tag rl8docker:latest .
+"$CONT_BIN" run -ti --rm --name rl8docker -d rl8docker:latest
+"$CONT_BIN" cp ../../ rl8docker:/nemea
+"$CONT_BIN" exec -ti rl8docker bash -c 'cd /nemea; ./rpms.sh root'
+"$CONT_BIN" exec -ti rl8docker bash -c 'cd /nemea/nemea-framework/; for i in libtrap unirec common pytrap; do ( cd $i; make doc; ) done; cd /nemea; mkdir doc; \
+mv nemea-framework/libtrap/doc/doxygen/html doc/libtrap; \
+mv nemea-framework/libtrap/doc/devel/html doc/libtrap-devel; \
+mv nemea-framework/unirec/doc/html doc/unirec; \
+mv nemea-framework/common/doc/html doc/nemea-common; \
+mv nemea-framework/pytrap/docs/html doc/pytrap;'
+"$CONT_BIN" exec -ti rl8docker bash -c 'cd /nemea; ls -l rpms doc'
+"$CONT_BIN" cp rl8docker:/nemea/rpms rpms
+"$CONT_BIN" cp rl8docker:/nemea/nemea-framework/pytrap/dist wheels
+"$CONT_BIN" cp rl8docker:/nemea/doc doc
+
+# This will remove the container:
+"$CONT_BIN" stop rl8docker
+
+# This would remove the image:
+# "$CONT_BIN" rmi rl8docker:latest
+
diff --git a/generate-rpm.sh b/generate-rpm.sh
index 7ea9b83..41cd86e 100755
--- a/generate-rpm.sh
+++ b/generate-rpm.sh
@@ -35,5 +35,6 @@
 # if advised of the possibility of such damage.
 
 pwd
-./bootstrap.sh >/dev/null 2>/dev/null&& ./configure -q && make -j4 && make rpm
+git submodule init; git submodule update;
+./bootstrap.sh >/dev/null 2>/dev/null&& ./configure -q && make rpm
 
diff --git a/mock/README.md b/mock/README.md
new file mode 100644
index 0000000..30cacb3
--- /dev/null
+++ b/mock/README.md
@@ -0,0 +1,12 @@
+# Explanation
+
+This directory contains `mock` configuration files, which include @CESNET/NEMEA
+copr repo with dependencies.
+
+Example how to rebuild a package for, e.g., libtrap for RockyLinux8 is as follows:
+
+```
+mock -r rocky+epel+nemea-8-x86_64.cfg path/to/srpms/libtrap-1.18.1-1.src.rpm
+```
+
+See the output of the command to find the results and logs.
diff --git a/mock/rocky+epel+nemea-8-x86_64.cfg b/mock/rocky+epel+nemea-8-x86_64.cfg
new file mode 100644
index 0000000..debc1de
--- /dev/null
+++ b/mock/rocky+epel+nemea-8-x86_64.cfg
@@ -0,0 +1,20 @@
+include('rocky+epel-8-x86_64.cfg')
+
+config_opts['dnf.conf'] += """
+[copr:copr.fedorainfracloud.org:group_CESNET:NEMEA]
+name=Copr repo for NEMEA owned by @CESNET
+baseurl=https://download.copr.fedorainfracloud.org/results/@CESNET/NEMEA/epel-8-$basearch/
+type=rpm-md
+skip_if_unavailable=True
+gpgcheck=1
+gpgkey=https://download.copr.fedorainfracloud.org/results/@CESNET/NEMEA/pubkey.gpg
+repo_gpgcheck=0
+enabled=1
+enabled_metadata=1
+
+"""
+
+config_opts['description'] = 'Rocky Linux 8 + EPEL + NEMEA'
+config_opts['root'] = "rocky+epel+nemea-8-{{ target_arch }}"
+
+
diff --git a/mock/rocky+epel+nemea-9-x86_64.cfg b/mock/rocky+epel+nemea-9-x86_64.cfg
new file mode 100644
index 0000000..0112df0
--- /dev/null
+++ b/mock/rocky+epel+nemea-9-x86_64.cfg
@@ -0,0 +1,19 @@
+include('rocky+epel-9-x86_64.cfg')
+
+config_opts['dnf.conf'] += """
+[copr:copr.fedorainfracloud.org:group_CESNET:NEMEA]
+name=Copr repo for NEMEA owned by @CESNET
+baseurl=https://download.copr.fedorainfracloud.org/results/@CESNET/NEMEA/epel-9-$basearch/
+type=rpm-md
+skip_if_unavailable=True
+gpgcheck=1
+gpgkey=https://download.copr.fedorainfracloud.org/results/@CESNET/NEMEA/pubkey.gpg
+repo_gpgcheck=0
+enabled=1
+enabled_metadata=1
+
+"""
+
+config_opts['description'] = 'Rocky Linux 9 + EPEL + NEMEA'
+config_opts['root'] = "rocky+epel+nemea-9-{{ target_arch }}"
+
diff --git a/modules-ng b/modules-ng
new file mode 160000
index 0000000..9d81cf1
--- /dev/null
+++ b/modules-ng
@@ -0,0 +1 @@
+Subproject commit 9d81cf1b59a8ba0cd357a1b0687d2d057106c471
diff --git a/nemea-framework b/nemea-framework
index a554edf..54a727d 160000
--- a/nemea-framework
+++ b/nemea-framework
@@ -1 +1 @@
-Subproject commit a554edfb3bb834218ba4a1268188a641cd07ae6f
+Subproject commit 54a727dbd95767cc3a013edc6c66612a81687409
diff --git a/rpms.sh b/rpms.sh
index a06cbdf..99e8358 100755
--- a/rpms.sh
+++ b/rpms.sh
@@ -36,6 +36,14 @@
 
 #set -x
 
+if [ "$#" -eq 1 ]; then
+   chuser="$1"
+else
+   echo "For non-interactive mode run with username as argument, e.g.:"
+   echo "  $0 builder"
+   echo "where builder is a non-root user for building RPMs."
+fi
+
 if [ -x "`which dnf`" ]; then
    export pkginst=dnf
 elif [ -x "`which yum`" ]; then
@@ -45,23 +53,28 @@ else
    exit 1
 fi
 
-echo "Warning: You must have 'rpmbuild' in order to generate RPM package."
-echo "If you want to abort this script, press CTRL+C (i.e. send SIGINT signal)"
-sleep 5
+if [ -z "$chuser" ]; then
+   echo "Warning: You must have 'rpmbuild' in order to generate RPM package."
+   echo "If you want to abort this script, press CTRL+C (i.e. send SIGINT signal)"
+   sleep 5
 
-if [ "x`whoami`" != xroot ]; then
-   echo "Run this script as root, since it must install RPM packages continuously"
-   exit 1
-fi
+   if [ "x`whoami`" != xroot ]; then
+      echo "Run this script as root, since it must install RPM packages continuously"
+      exit 1
+   fi
 
-read -p "Enter the name of user who will compile packages: " chuser
+   read -p "Enter the name of user who will compile packages: " chuser
 
-read -p "Are You sure You want to continue? [yn]" -n1 ans
+   read -p "Are You sure You want to continue? [yn]" -n1 ans
 
-if [ "x$ans" != xy ]; then
-   exit 0
+   if [ "x$ans" != xy ]; then
+      exit 0
+   fi
 fi
 
+./bootstrap.sh
+./configure -q
+
 echo "Remove previously installed packages"
 $pkginst remove -q -y libtrap\* unirec\* nemea\*
 $pkginst install -q -y libnf-devel libpcap-devel libidn-devel bison flex
@@ -88,15 +101,21 @@ export chuser
    )
    su $chuser -p -c "./bootstrap.sh >/dev/null 2>/dev/null&& ./configure -q"
    (
-      cd python
-      su $chuser -p -c "make && make rpm"
+      cd pytrap
+      su $chuser -p -c "make rpm"
       $pkginst install -y -q $(find \( -name '*noarch.rpm' -o -name '*64.rpm' \))
+      su $chuser -p -c "python3.6 setup.py bdist_wheel"
+      su $chuser -p -c "python3.8 setup.py bdist_wheel"
+      su $chuser -p -c "python3.9 setup.py bdist_wheel"
    )
    (
       cd pycommon
-      su $chuser -p -c "make && make rpm"
+      su $chuser -p -c "make rpm"
+      su $chuser -p -c "python3.6 setup.py bdist_wheel"
       $pkginst install -y -q $(find \( -name '*noarch.rpm' -o -name '*64.rpm' \))
    )
+   su $chuser -p -c "make rpm"
+   $pkginst install -y -q $(find -name 'nemea-framework-*noarch.rpm')
 )
 (
    cd modules
@@ -108,6 +127,11 @@ export chuser
    su $chuser -p -c "$topdir/generate-rpm.sh"
    $pkginst install -y -q $(find \( -name '*noarch.rpm' -o -name '*64.rpm' \))
 )
+(
+   cd modules-ng
+   su $chuser -p -c "cmake . && make rpm"
+   $pkginst install -y -q $(find \( -name '*noarch.rpm' -o -name '*64.rpm' \))
+)
 (
    cd nemea-supervisor
    su $chuser -p -c "$topdir/generate-rpm.sh"
@@ -118,6 +142,10 @@ su $chuser -p -c "$topdir/bootstrap.sh >/dev/null 2>/dev/null&& $topdir/configur
 mkdir -p "`pwd`/RPMBUILD"
 rpmbuild  -ba nemea.spec --define "_topdir `pwd`/RPMBUILD"
 mkdir -p "`pwd`/rpms"
-find -name *.rpm -not -path "./rpms/*" -exec mv {} rpms/ \;
+find -name '*.rpm' -not -path "./rpms/*" -exec mv {} rpms/ \;
 chown -R $chuser rpms/
 
+mkdir -p "`pwd`/wheels"
+find -name '*.whl' -not -path "./wheels/*" -exec mv {} wheels/ \;
+
+
diff --git a/vagrant/CentOS7/README.md b/vagrant/CentOS7/README.md
deleted file mode 100644
index 88f2534..0000000
--- a/vagrant/CentOS7/README.md
+++ /dev/null
@@ -1,29 +0,0 @@
-Installation of NEMEA using Vagrant on CentOS7
-==============================================
-
-If you do not have a vagrant box for CentOS7 box yet, use:
-
-```
-vagrant box add centos/7 --provider=virtualbox
-```
-
-Installation - Final Step
-=========================
-
-Start the VM Installation using (this will take few minutes):
-```
-vagrant up
-```
-
-Once the installation is complete, SSH into the VM:
-```
-vagrant ssh
-```
-
-Content of VM
-=============
-
-* all NEMEA packages installed from RPM from homeproj.cesnet.cz
-* NEMEA-Dashboard
-* ipfixcol with ipfixcol-unirec-output
-
diff --git a/vagrant/CentOS7/Vagrantfile b/vagrant/CentOS7/Vagrantfile
deleted file mode 100644
index a23f207..0000000
--- a/vagrant/CentOS7/Vagrantfile
+++ /dev/null
@@ -1,54 +0,0 @@
-# -*- mode: ruby -*-
-# vi: set ft=ruby :
-
-load '../common/nemea-dashboard.rb'
-
-$tools = <<SCRIPT
-rpm -i https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
-yum install -y https://centos7.iuscommunity.org/ius-release.rpm
-yum install -y vim wget
-SCRIPT
-
-$install_nemea = <<SCRIPT
-wget -O /etc/yum.repos.d/copr-cesnet-ipfix.repo https://copr.fedorainfracloud.org/coprs/g/CESNET/IPFIXcol/repo/epel-7/group_CESNET-IPFIXcol-epel-7.repo
-rpm --import https://copr-be.cloud.fedoraproject.org/results/@CESNET/IPFIXcol/pubkey.gpg
-wget -O /etc/yum.repos.d/cesnet-nemea.repo https://copr.fedorainfracloud.org/coprs/g/CESNET/NEMEA/repo/epel-7/group_CESNET-NEMEA-epel-7.repo
-rpm --import https://copr-be.cloud.fedoraproject.org/results/@CESNET/NEMEA/pubkey.gpg
-yum install -y nemea nemea-framework-devel ipfixcol ipfixcol-unirec-output
-SCRIPT
-
-$run_supervisor = <<SCRIPT
-cp -R /usr/share/nemea-supervisor/* /etc/nemea/
-service nemea-supervisor start
-SCRIPT
-
-$munin = <<SCRIPT
-yum install -y httpd munin munin-node
-cat > /etc/httpd/conf.d/munin.conf <<SCRIPT2
-<Directory /var/www/html/munin/>
-Order Allow,Deny
-Allow from all
-</Directory>
-SCRIPT2
-ln -s /usr/share/munin/plugins/nemea_supervisor /etc/munin/plugins/
-service httpd restart
-service munin-node start
-chkconfig munin-node on
-chkconfig httpd on
-iptables -I INPUT 1 -p TCP --dport 80 -j ACCEPT
-SCRIPT
-
-
-Vagrant.configure(2) do |config|
-  config.vm.define "Nemea-Demo" do |nemeademo|
-    nemeademo.vm.box = "centos/7"
-    nemeademo.vm.network "forwarded_port", guest: 80, host: 2280
-    nemeademo.vm.network "forwarded_port", guest: 5555, host: 5555
-
-    nemeademo.vm.provision :shell, inline: $tools
-    nemeademo.vm.provision :shell, inline: $install_nemea
-    nemeademo.vm.provision :shell, inline: $run_supervisor
-    nemeademo.vm.provision :shell, inline: $munin
-    nemeademo.vm.provision :shell, inline: $nemeadashboard
-  end
-end
diff --git a/vagrant/Fedora22/README.md b/vagrant/Fedora22/README.md
deleted file mode 100644
index b59e9d1..0000000
--- a/vagrant/Fedora22/README.md
+++ /dev/null
@@ -1,28 +0,0 @@
-Installation of NEMEA using Vagrant on Fedora22 Cloud
-=====================================================
-
-If you do not have a vagrant box for Fedora22 Cloud box yet, use:
-
-```
-vagrant box add fedora22-cloud https://download.fedoraproject.org/pub/fedora/linux/releases/22/Cloud/x86_64/Images/Fedora-Cloud-Base-Vagrant-22-20150521.x86_64.vagrant-virtualbox.box
-```
-
-Installation - Final Step
-=========================
-
-Start the VM Installation using (this will take few minutes):
-```
-vagrant up
-```
-
-Once the installation is complete, SSH into the VM:
-```
-vagrant ssh
-```
-
-Content of VM
-=============
-
-* NEMEA installed from source codes
-* munin
-
diff --git a/vagrant/Fedora22/Vagrantfile b/vagrant/Fedora22/Vagrantfile
deleted file mode 100644
index 3f1884f..0000000
--- a/vagrant/Fedora22/Vagrantfile
+++ /dev/null
@@ -1,72 +0,0 @@
-# -*- mode: ruby -*-
-# vi: set ft=ruby :
-
-# Vagrantfile API/syntax version. Don't touch unless you know what you're doing!
-VAGRANTFILE_API_VERSION = "2"
-
-$bootstrap_linux = <<SCRIPT
-dnf -y update dnf
-dnf install -y wget autoconf automake gcc gcc-c++ libtool \
-libxml2-devel libxslt-devel m4 make file pkgconfig libcurl-devel \
-git curl-devel doxygen munin munin-node httpd bison flex
-
-wget -q http://downloads.sourceforge.net/project/libnfdump/libnfdump-0.1.1.tar.gz && tar -xf libnfdump-0.1.1.tar.gz
-cd libnfdump-0.1.1
-./configure  --prefix=/usr --libdir=/usr/lib64 -q && make V=0 install
-cd ..
-rm -rf libnfdump-0.1.1*
-dnf clean all
-
-SCRIPT
-
-$install_nemea = <<SCRIPT
-cd /root/
-git clone --recursive --depth 10 https://github.com/CESNET/nemea
-cd nemea
-./bootstrap.sh&&./configure --prefix=/usr --bindir=/usr/bin/nemea --sysconfdir=/etc/nemea --libdir=/usr/lib64 -q&&make -j5 install
-ldconfig
-mkdir -p /var/log/nemea-supervisor
-echo "export PATH=\$PATH:/usr/bin/nemea/" > /etc/profile.d/nemea.sh
-SCRIPT
-
-$run_supervisor = <<SCRIPT
-cd /root/nemea/config-examples
-./prepare_default_config.sh install
-cp supervisor_config.xml /etc/nemea/
-systemctl enable nemea-supervisor
-service nemea-supervisor start
-SCRIPT
-
-$run_munin = <<SCRIPT
-cat > /etc/httpd/conf.d/munin.conf <<SCRIPT2
-<Directory /var/www/html/munin/>
-Order Allow,Deny
-Allow from all
-</Directory>
-SCRIPT2
-ln -s /usr/share/munin/plugins/nemea_supervisor /etc/munin/plugins/
-service httpd restart
-service munin-node start
-chkconfig munin-node on
-chkconfig httpd on
-SCRIPT
-
-$run_iptables = <<SCRIPT
-iptables -I INPUT 1 -p TCP --dport 80 -j ACCEPT
-SCRIPT
-
-Vagrant.configure(VAGRANTFILE_API_VERSION) do |config|
-  config.vm.define "Nemea-Demo" do |nemeademo|
-     nemeademo.vm.box = "fedora22-cloud"
-
-     # If private network is needed due to communication with other VMs:
-     #nemeademo.vm.network "private_network", :type => 'dhcp'
-
-     nemeademo.vm.provision :shell, inline: $bootstrap_linux
-     nemeademo.vm.provision :shell, inline: $install_nemea
-     nemeademo.vm.provision :shell, inline: $run_supervisor
-     nemeademo.vm.provision :shell, inline: $run_munin
-     nemeademo.vm.provision :shell, inline: $run_iptables
-  end
-end
-
diff --git a/vagrant/OracleLinux9/README.md b/vagrant/OracleLinux9/README.md
new file mode 100644
index 0000000..915b4d2
--- /dev/null
+++ b/vagrant/OracleLinux9/README.md
@@ -0,0 +1,29 @@
+Installation of NEMEA using Vagrant on OracleLinux9
+===================================================
+
+If you do not have a vagrant box for OracleLinux9 box yet, use:
+
+```
+vagrant box add generic/oracle9 --provider=virtualbox
+```
+
+Installation - Final Step
+=========================
+
+Start the VM Installation using (this will take few minutes):
+```
+vagrant up
+```
+
+Once the installation is complete, SSH into the VM:
+```
+vagrant ssh
+```
+
+Content of VM
+=============
+
+* ipfixprobe
+* ipfixcol2 with ipfixcol2-unirec-output
+* all NEMEA packages installed from COPR repository
+
diff --git a/vagrant/OracleLinux9/Vagrantfile b/vagrant/OracleLinux9/Vagrantfile
new file mode 100644
index 0000000..bb0efa1
--- /dev/null
+++ b/vagrant/OracleLinux9/Vagrantfile
@@ -0,0 +1,40 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+Vagrant.configure("2") do |config|
+  config.vm.box = "generic/oracle9"
+  config.vm.box_check_update = false
+  config.vm.provider "virtualbox" do |vb|
+    vb.gui = false
+    vb.memory = "1024"
+    vb.customize ["modifyvm", :id, "--cpus", 3]
+    vb.customize ["modifyvm", :id, "--name", "nemea-vm"]
+  end
+
+  config.vm.network "forwarded_port", guest: 4739, host: 4739, protocol: "udp"
+  config.vm.network "forwarded_port", guest: 4739, host: 4739, protocol: "tcp"
+
+  # config.vm.provision "shell", inline: <<-SHELL
+  #   apt-get update
+  #   apt-get install -y apache2
+  # SHELL
+  config.vm.provision "shell", inline: <<-SHELL
+      hostnamectl set-hostname nemea-vm
+  SHELL
+
+  config.vm.provision :ansible do |ansible|
+      ansible.playbook = "../ansible/nemea-vm.yml"
+      ansible.become = "sudo"
+      ansible.compatibility_mode = "1.8"
+      # ansible.inventory_path = "../ansible/inventory/hosts"
+      # ansible.tags = "install"
+      ansible.groups = {
+        "nemea-vm" => ["default"]
+      }
+
+      ansible.raw_arguments = [
+        "-v", "--become-method=sudo", "--become"
+      ]
+    end
+
+end
diff --git a/vagrant/README.md b/vagrant/README.md
index 8af95b1..bef77a0 100644
--- a/vagrant/README.md
+++ b/vagrant/README.md
@@ -12,15 +12,16 @@ You can download these software here:
 
 - Virtualbox: https://www.virtualbox.org/wiki/Downloads
 - Vagrant: http://www.vagrantup.com/downloads.html
+- Ansible
+    - galaxy collection community: `ansible-galaxy collection install community.general`
+    - galaxy collection posix: `ansible-galaxy collection install ansible.posix`
 
 NEMEA Installation Steps
 ========================
 
 This directory contains prepared configuration (Vagrantfile) for the following systems:
 
-* [CentOS 7](./CentOS7/)
-* [Fedora 22 Cloud](./Fedora22/)
-* [Scientific Linux](./ScientificLinux6/)
+* [OracleLinux9](./OracleLinux9/)
 
 After choosing the system change working directory into the chosen one and follow the
 system dependent instructions in the README.md file.
diff --git a/vagrant/ScientificLinux6/README.md b/vagrant/ScientificLinux6/README.md
deleted file mode 100644
index f959adb..0000000
--- a/vagrant/ScientificLinux6/README.md
+++ /dev/null
@@ -1,28 +0,0 @@
-Installation of NEMEA using Vagrant on Scientific Linux 6
-=========================================================
-
-If you do not have a vagrant box for Scientific Linux 6 box yet, use:
-
-```
-vagrant box add --insecure cesnet/nemea-2-1-0 https://sauvignon.liberouter.org/nemea-2-1-0.box
-```
-
-Installation - Final Step
-=========================
-
-Start the VM Installation using (this will take few minutes):
-```
-vagrant up
-```
-
-Once the installation is complete, SSH into the VM:
-```
-vagrant ssh
-```
-
-Content of VM
-=============
-
-* NEMEA installed from source codes
-* munin
-
diff --git a/vagrant/ScientificLinux6/Vagrantfile b/vagrant/ScientificLinux6/Vagrantfile
deleted file mode 100644
index 7f725a5..0000000
--- a/vagrant/ScientificLinux6/Vagrantfile
+++ /dev/null
@@ -1,76 +0,0 @@
-# -*- mode: ruby -*-
-# vi: set ft=ruby :
-
-# Vagrantfile API/syntax version. Don't touch unless you know what you're doing!
-VAGRANTFILE_API_VERSION = "2"
-
-#yum update -y
-$bootstrap_linux = <<SCRIPT
-rpm -i https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm
-
-yum install -y autoconf automake gcc gcc-g++ libtool libxml2-devel m4 make \
-openssl libssl-devel pkg-config libxslt-devel \
-libcurl4-openssl-dev xsltproc git curl-devel \
-libxml2-python libxslt-python doxygen munin munin-node \
-libpcap-devel httpd bison flex
-
-wget -q https://homeproj.cesnet.cz/rpm/liberouter/devel/x86_64/libnf-1.17-1.x86_64.rpm
-wget -q https://homeproj.cesnet.cz/rpm/liberouter/devel/x86_64/libnf-devel-1.17-1.x86_64.rpm
-wget -q https://homeproj.cesnet.cz/rpm/liberouter/devel/x86_64/libnf-debuginfo-1.17-1.x86_64.rpm
-yum install -y ./libnf*
-
-yum clean all
-
-SCRIPT
-
-$install_nemea = <<SCRIPT
-cd /root/
-git clone --recursive --depth 10 https://github.com/CESNET/nemea
-cd nemea
-./bootstrap.sh&&./configure --prefix=/usr --bindir=/usr/bin/nemea --sysconfdir=/etc/nemea --libdir=/usr/lib64 -q&&make -j5 install
-ldconfig
-mkdir -p /var/log/nemea-supervisor
-echo "export PATH=\$PATH:/usr/bin/nemea/" > /etc/profile.d/nemea.sh
-SCRIPT
-
-$run_supervisor = <<SCRIPT
-/usr/bin/nemea/set_default_nic.sh /etc/nemea/supervisor_config.xml
-service nemea-supervisor restart
-chkconfig nemea-supervisor on
-SCRIPT
-
-$run_munin = <<SCRIPT
-cat > /etc/httpd/conf.d/munin.conf <<SCRIPT2
-<Directory /var/www/html/munin/>
-Order Allow,Deny
-Allow from all
-</Directory>
-SCRIPT2
-ln -s /usr/share/munin/plugins/nemea_supervisor /etc/munin/plugins/
-service httpd restart
-service munin-node start
-chkconfig munin-node on
-chkconfig httpd on
-SCRIPT
-
-
-$run_iptables = <<SCRIPT
-iptables -I INPUT 2 -p TCP --dport 830 -j ACCEPT
-iptables -I INPUT 2 -p TCP --dport 80 -j ACCEPT
-SCRIPT
-
-Vagrant.configure(VAGRANTFILE_API_VERSION) do |config|
-  config.vm.define "Nemea-Demo" do |nemeademo|
-     nemeademo.vm.box = "cesnet/nemea-2-1-0"
-
-     # If private network is needed due to communication with other VMs:
-     #nemeademo.vm.network "private_network", :type => 'dhcp'
-
-     nemeademo.vm.provision :shell, inline: $bootstrap_linux
-     nemeademo.vm.provision :shell, inline: $install_nemea
-     nemeademo.vm.provision :shell, inline: $run_supervisor
-     nemeademo.vm.provision :shell, inline: $run_munin
-     nemeademo.vm.provision :shell, inline: $run_iptables
-  end
-end
-
diff --git a/vagrant/ansible/inventory/hosts b/vagrant/ansible/inventory/hosts
new file mode 100644
index 0000000..d840002
--- /dev/null
+++ b/vagrant/ansible/inventory/hosts
@@ -0,0 +1,3 @@
+[nemea-vm]
+nemea-vm ansible_ssh_user=vagrant ansible_password=vagrant become_method=sudo
+
diff --git a/vagrant/ansible/nemea-vm.yml b/vagrant/ansible/nemea-vm.yml
new file mode 100644
index 0000000..da3a738
--- /dev/null
+++ b/vagrant/ansible/nemea-vm.yml
@@ -0,0 +1,9 @@
+---
+- hosts: nemea-vm
+  roles:
+    - common_tools
+    - ipfixprobe
+    - ipfixcol2
+    - nemea
+    - configs
+
diff --git a/vagrant/ansible/roles/common_tools/meta/main.yml b/vagrant/ansible/roles/common_tools/meta/main.yml
new file mode 100644
index 0000000..a73b8d2
--- /dev/null
+++ b/vagrant/ansible/roles/common_tools/meta/main.yml
@@ -0,0 +1,4 @@
+---
+dependencies:
+  - role: rpm_repositories
+
diff --git a/vagrant/ansible/roles/common_tools/tasks/main.yml b/vagrant/ansible/roles/common_tools/tasks/main.yml
new file mode 100644
index 0000000..6c322a2
--- /dev/null
+++ b/vagrant/ansible/roles/common_tools/tasks/main.yml
@@ -0,0 +1,21 @@
+---
+- name: Sudo is installed
+  ansible.builtin.dnf:
+    name: sudo
+    state: latest
+
+- name: Htop is installed
+  ansible.builtin.dnf:
+    name: htop
+    state: latest
+
+- name: Vim is installed
+  ansible.builtin.dnf:
+    name: vim
+    state: latest
+
+- name: tcpdump is installed
+  ansible.builtin.dnf:
+    name: tcpdump
+    state: latest
+
diff --git a/vagrant/ansible/roles/configs/files/eth0.conf b/vagrant/ansible/roles/configs/files/eth0.conf
new file mode 100644
index 0000000..4a233cc
--- /dev/null
+++ b/vagrant/ansible/roles/configs/files/eth0.conf
@@ -0,0 +1,11 @@
+INPUT[0]="raw;ifc=eth0"
+PROCESS=(pstats tls quic http ssdp "dnssd;txt")
+CACHE_SIZE=17
+ACTIVE_TIMEOUT=300
+INACTIVE_TIMEOUT=65
+LINK=0
+DIR=0
+HOST=127.0.0.1
+PORT=4739
+UDP=yes
+TEMPLATE_REFRESH_RATE=30
diff --git a/vagrant/ansible/roles/configs/files/ipfixcol2-startup.xml b/vagrant/ansible/roles/configs/files/ipfixcol2-startup.xml
new file mode 100644
index 0000000..1a80db7
--- /dev/null
+++ b/vagrant/ansible/roles/configs/files/ipfixcol2-startup.xml
@@ -0,0 +1,59 @@
+<ipfixcol2>
+  <!-- Input plugins -->
+  <inputPlugins>
+    <input>
+      <name>TCP collector</name>
+      <plugin>tcp</plugin>
+      <params>
+        <!-- List on port 4739 -->
+        <localPort>4739</localPort>
+        <!-- Bind to all local adresses -->
+        <localIPAddress></localIPAddress>
+      </params>
+    </input>
+    <input>
+      <name>UDP collector</name>
+      <plugin>udp</plugin>
+      <params>
+        <!-- List on port 4739 -->
+        <localPort>4739</localPort>
+        <!-- Bind to all local adresses -->
+        <localIPAddress></localIPAddress>
+      </params>
+    </input>
+  </inputPlugins>
+
+  <outputPlugins>
+       <!-- resend IPFIX -->
+
+       <output>
+         <name>Dummy output</name>
+         <plugin>dummy</plugin>
+         <params>
+             <delay>0</delay>
+             <stats>true</stats>
+         </params>
+     </output>
+  <output>
+      <name>UR_ETA</name>
+      <plugin>unirec</plugin>
+      <params>
+          <uniRecFormat>TIME_FIRST,TIME_LAST,SRC_IP,DST_IP,PROTOCOL,SRC_PORT,DST_PORT,?TLS_SNI,?TLS_JA3_FINGERPRINT,?TCP_FLAGS,?TCP_FLAGS_REV,PACKETS,PACKETS_REV,BYTES,BYTES_REV,PPI_PKT_LENGTHS,PPI_PKT_TIMES,PPI_PKT_FLAGS,PPI_PKT_DIRECTIONS,?S_PHISTS_SIZES,?D_PHISTS_SIZES,?S_PHISTS_IPT,?D_PHISTS_IPT,?SBI_BRST_BYTES,?SBI_BRST_PACKETS,?SBI_BRST_TIME_START,?SBI_BRST_TIME_STOP,?DBI_BRST_PACKETS,?DBI_BRST_BYTES,?DBI_BRST_TIME_START,?DBI_BRST_TIME_STOP,?IDP_CONTENT,?IDP_CONTENT_REV,LINK_BIT_FIELD,?OVPN_CONF_LEVEL,?WG_CONF_LEVEL,?SSA_CONF_LEVEL,?FLOW_END_REASON</uniRecFormat>
+          <splitBiflow>false</splitBiflow>
+          <trapIfcCommon>
+              <timeout>NO_WAIT</timeout>
+              <buffer>true</buffer>
+              <autoflush>1000000</autoflush>
+          </trapIfcCommon>
+          <trapIfcSpec>
+              <unix>
+                  <name>eta_flowdata</name>
+                  <maxClients>64</maxClients>
+              </unix>
+          </trapIfcSpec>
+      </params>
+  </output>
+
+  </outputPlugins>
+</ipfixcol2>
+
diff --git a/vagrant/ansible/roles/configs/files/logger.sup b/vagrant/ansible/roles/configs/files/logger.sup
new file mode 100644
index 0000000..6e9c26a
--- /dev/null
+++ b/vagrant/ansible/roles/configs/files/logger.sup
@@ -0,0 +1,35 @@
+<module>
+<name>storage</name>
+<enabled>true</enabled>
+<path>/usr/bin/nemea/traffic_repeater</path>
+<params/>
+<trapinterfaces>
+<interface>
+  <type>UNIXSOCKET</type>
+  <direction>IN</direction>
+  <params>eta_flowdata</params>
+</interface>
+<interface>
+  <type>FILE</type>
+  <direction>OUT</direction>
+  <params>/data/flows/%Y/%m/data.trapcap:a:time=5</params>
+</interface>
+</trapinterfaces>
+</module>
+
+<!--
+<module>
+<name>logger</name>
+<enabled>true</enabled>
+<path>/usr/bin/nemea/logger</path>
+<params>-t -T -a /data/flows.log</params>
+<trapinterfaces>
+<interface>
+  <type>UNIXSOCKET</type>
+  <direction>IN</direction>
+  <params>eta_flowdata</params>
+</interface>
+</trapinterfaces>
+</module>
+-->
+
diff --git a/vagrant/ansible/roles/configs/files/motd b/vagrant/ansible/roles/configs/files/motd
new file mode 100644
index 0000000..f467955
--- /dev/null
+++ b/vagrant/ansible/roles/configs/files/motd
@@ -0,0 +1,6 @@
+Flow data are being stored into /data/flow/...
+To convert the file to CSV text, use /usr/bin/nemea/logger
+E.g.:
+        /usr/bin/nemea/logger -t -i 'f:/data/flows/2024/10/data.trapcap.*'
+
+
diff --git a/vagrant/ansible/roles/configs/tasks/main.yml b/vagrant/ansible/roles/configs/tasks/main.yml
new file mode 100644
index 0000000..8a89ff1
--- /dev/null
+++ b/vagrant/ansible/roles/configs/tasks/main.yml
@@ -0,0 +1,51 @@
+---
+- name: Copy ipfixprobe config
+  copy:
+    src: eth0.conf
+    dest: /etc/ipfixprobe/
+
+- name: Copy IPFIXcol2 config
+  copy:
+    src: ipfixcol2-startup.xml
+    dest: /etc/ipfixcol2/
+
+- name: Create datadir
+  ansible.builtin.file:
+    path: /data/
+    state: directory
+    owner: nemead
+    group: nemead
+    
+- name: Copy NEMEA config
+  copy:
+    src: logger.sup
+    dest: /etc/nemea/data-sources/
+    owner: nemead
+    group: nemead
+
+- name: Restart IPFIXcol2
+  ansible.builtin.systemd:
+    name: ipfixcol2
+    state: restarted
+    enabled: true
+  
+- name: Restart NEMEA
+  ansible.builtin.systemd:
+    name: nemea-supervisor
+    state: restarted
+    enabled: true
+
+- name: Reload NEMEA config
+  command: supcli -r
+  
+- name: Restart ipfixprobe
+  ansible.builtin.systemd:
+    name: ipfixprobe@eth0
+    state: restarted
+    enabled: true
+  
+- name: Copy motd
+  copy:
+    src: motd
+    dest: /etc/motd
+
diff --git a/vagrant/ansible/roles/ipfixcol2/files/ipfixcol2.service b/vagrant/ansible/roles/ipfixcol2/files/ipfixcol2.service
new file mode 100644
index 0000000..7d94ccb
--- /dev/null
+++ b/vagrant/ansible/roles/ipfixcol2/files/ipfixcol2.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=Start IPFIXcol2 collector
+
+# Ensure that hanic service is loaded:
+After=network-online.target
+
+[Service]
+Type=simple
+Restart=on-failure
+
+ExecStart=/usr/bin/ipfixcol2 -c /etc/ipfixcol2/ipfixcol2-startup.xml -r 16384
+
+[Install]
+WantedBy=multi-user.target
+
diff --git a/vagrant/ansible/roles/ipfixcol2/meta/main.yml b/vagrant/ansible/roles/ipfixcol2/meta/main.yml
new file mode 100644
index 0000000..a73b8d2
--- /dev/null
+++ b/vagrant/ansible/roles/ipfixcol2/meta/main.yml
@@ -0,0 +1,4 @@
+---
+dependencies:
+  - role: rpm_repositories
+
diff --git a/vagrant/ansible/roles/ipfixcol2/tasks/main.yml b/vagrant/ansible/roles/ipfixcol2/tasks/main.yml
new file mode 100644
index 0000000..4032b8c
--- /dev/null
+++ b/vagrant/ansible/roles/ipfixcol2/tasks/main.yml
@@ -0,0 +1,17 @@
+---
+- name: IPFIXcol2 is installed
+  ansible.builtin.dnf:
+    name:
+      - ipfixcol2
+      - ipfixcol2-unirec-output
+    state: latest
+
+- name: Copy IPFIXcol2 config
+  copy:
+    src: ipfixcol2.service
+    dest: /usr/lib/systemd/system/
+
+- name: Reload systemd configs
+  ansible.builtin.systemd:
+    daemon_reload: true
+
diff --git a/vagrant/ansible/roles/ipfixprobe/meta/main.yml b/vagrant/ansible/roles/ipfixprobe/meta/main.yml
new file mode 100644
index 0000000..a73b8d2
--- /dev/null
+++ b/vagrant/ansible/roles/ipfixprobe/meta/main.yml
@@ -0,0 +1,4 @@
+---
+dependencies:
+  - role: rpm_repositories
+
diff --git a/vagrant/ansible/roles/ipfixprobe/tasks/main.yml b/vagrant/ansible/roles/ipfixprobe/tasks/main.yml
new file mode 100644
index 0000000..dba90c2
--- /dev/null
+++ b/vagrant/ansible/roles/ipfixprobe/tasks/main.yml
@@ -0,0 +1,6 @@
+---
+- name: ipfixprobe is installed
+  ansible.builtin.dnf:
+    name: ipfixprobe
+    state: latest
+ 
diff --git a/vagrant/ansible/roles/nemea/meta/main.yml b/vagrant/ansible/roles/nemea/meta/main.yml
new file mode 100644
index 0000000..a73b8d2
--- /dev/null
+++ b/vagrant/ansible/roles/nemea/meta/main.yml
@@ -0,0 +1,4 @@
+---
+dependencies:
+  - role: rpm_repositories
+
diff --git a/vagrant/ansible/roles/nemea/tasks/main.yml b/vagrant/ansible/roles/nemea/tasks/main.yml
new file mode 100644
index 0000000..1c35ced
--- /dev/null
+++ b/vagrant/ansible/roles/nemea/tasks/main.yml
@@ -0,0 +1,7 @@
+---
+- name: NEMEA is installed
+  ansible.builtin.dnf:
+    name:
+      - nemea
+    state: latest
+
diff --git a/vagrant/ansible/roles/rpm_repositories/tasks/main.yml b/vagrant/ansible/roles/rpm_repositories/tasks/main.yml
new file mode 100644
index 0000000..497da17
--- /dev/null
+++ b/vagrant/ansible/roles/rpm_repositories/tasks/main.yml
@@ -0,0 +1,17 @@
+---
+- name: Enable EPEL repository
+  ansible.builtin.dnf:
+    name: epel-release
+    state: latest
+
+- name: Enable @CESNET/NEMEA repository
+  community.general.copr:
+    name: '@CESNET/NEMEA'
+    chroot: epel-9-x86_64
+    state: enabled
+
+- name: Enable @CESNET/IPFIXcol2 repository
+  community.general.copr:
+    name: '@CESNET/IPFIXcol'
+    chroot: epel-9-x86_64
+    state: enabled
diff --git a/vagrant/common/Makefile.am b/vagrant/common/Makefile.am
deleted file mode 100644
index 24c02c1..0000000
--- a/vagrant/common/Makefile.am
+++ /dev/null
@@ -1,2 +0,0 @@
-EXTRA_DIST=nemea-dashboard.rb
-
diff --git a/vagrant/common/nemea-dashboard.rb b/vagrant/common/nemea-dashboard.rb
deleted file mode 100644
index 5b853aa..0000000
--- a/vagrant/common/nemea-dashboard.rb
+++ /dev/null
@@ -1,242 +0,0 @@
-# -*- mode: ruby -*-
-# vi: set ft=ruby :
-
-$nemeadashboard = <<-SCRIPT
-echo '[mongodb-org-3.2]
-name=MongoDB Repository
-baseurl=https://repo.mongodb.org/yum/redhat/$releasever/mongodb-org/3.2/x86_64/
-gpgcheck=0
-enabled=1
-' > /etc/yum.repos.d/mongodb-org-3.2.repo
-
-# install dependencies
-yum install -y https://centos7.iuscommunity.org/ius-release.rpm
-yum -y install mongodb-org git wget python34 python34-devel httpd
-yum groupinstall -y "Development Tools"
-wget -q https://bootstrap.pypa.io/get-pip.py
-python3.4 get-pip.py
-yum install -y python-pymongo
-
-# start services
-systemctl enable httpd
-systemctl enable mongod
-service httpd start
-service mongod start
-
-# clone Nemea-Dashboard
-mkdir -p /var/www/html
-cd /var/www/html
-git clone --depth 1 https://github.com/CESNET/Nemea-Dashboard
-cd Nemea-Dashboard
-
-# install dashboard dependencies
-pip install -r requirements.txt
-
-mongo 127.0.0.1/nemeadb --eval '
-db.users.drop();
-
-var d = {
-   "password" : "$2a$12$MuAuralQ8p01q8eXPtTm4eZsflipBKx6cK0HZMpQbCNyDgcX4YPse",
-   "username" : "nemea",
-   "name" : "Nemea",
-   "surname" : "Test User",
-   "settings": [{
-      "items": [{
-              "loading": false,
-              "title": "",
-              "type": "sum",
-              "sizeX": 1,
-              "sizeY": 1,
-              "content": "Attempt.Login in last 24h",
-              "config": {
-                  "category": "Attempt.Login",
-                  "endtime": 1461062898,
-                  "type": "sum",
-                  "period": "24",
-                  "begintime": 1460976498
-              },
-              "col": 7,
-              "row": 4
-          },
-          {
-              "loading": false,
-              "title": "24h/30m categories (events)",
-              "type": "barchart",
-              "sizeX": 4,
-              "sizeY": 3,
-              "selector": false,
-              "content": "",
-              "config": {
-                  "metric": "Category",
-                  "period": "24",
-                  "window": "30",
-                  "begintime": 1460976498,
-                  "endtime": 1461062898,
-                  "type": "barchart"
-              },
-              "col": 0,
-              "row": 0
-          },
-          {
-              "loading": false,
-              "title": "24h categories",
-              "type": "piechart",
-              "sizeX": 2,
-              "sizeY": 3,
-              "content": "Share categories",
-              "config": {
-                  "metric": "Category",
-                  "period": "24",
-                  "filter": false,
-                  "begintime": 1460976524,
-                  "endtime": 1461062924,
-                  "type": "piechart"
-              },
-              "col": 4,
-              "row": 0
-          },
-          {
-              "loading": false,
-              "title": "24h Top flows",
-              "type": "top",
-              "sizeX": 3,
-              "sizeY": 2,
-              "content": "",
-              "config": {
-                  "endtime": 1461062898,
-                  "type": "top",
-                  "period": "60",
-                  "begintime": 1460846898
-              },
-              "col": 3,
-              "row": 3
-          },
-          {
-              "loading": false,
-              "title": "",
-              "type": "sum",
-              "sizeX": 1,
-              "sizeY": 1,
-              "content": "Events in last 24h",
-              "config": {
-                  "category": "any",
-                  "endtime": 1461062898,
-                  "type": "sum",
-                  "period": "24",
-                  "begintime": 1460976498
-              },
-              "col": 7,
-              "row": 3
-          },
-          {
-              "loading": false,
-              "title": "",
-              "type": "sum",
-              "sizeX": 1,
-              "sizeY": 1,
-              "content": "Events in last 1h",
-              "config": {
-                  "category": "any",
-                  "endtime": 1461062898,
-                  "type": "sum",
-                  "period": "1",
-                  "begintime": 1461059298
-              },
-              "col": 6,
-              "row": 3
-          },
-          {
-              "loading": false,
-              "title": "24h reporters",
-              "type": "piechart",
-              "sizeX": 2,
-              "sizeY": 3,
-              "content": "Share reporters",
-              "config": {
-                  "metric": "Node.SW",
-                  "endtime": 1461062898,
-                  "type": "piechart",
-                  "period": "24",
-                  "begintime": 1460976498
-              },
-              "col": 6,
-              "row": 0
-          },
-          {
-              "loading": false,
-              "title": "",
-              "type": "sum",
-              "sizeX": 1,
-              "sizeY": 1,
-              "content": "DDoS per 12h",
-              "config": {
-                  "category": "Availibility.DDoS",
-                  "endtime": 1461062898,
-                  "type": "sum",
-                  "period": "12",
-                  "begintime": 1461019698
-              },
-              "col": 6,
-              "row": 4
-          },
-          {
-              "loading": false,
-              "title": "24h/30m categories (flows)",
-              "type": "barchart",
-              "sizeX": 3,
-              "sizeY": 3,
-              "selector": true,
-              "content": "",
-              "config": {
-                  "metric": "Category",
-                  "period": "24",
-                  "window": "30",
-                  "begintime": 1460976498,
-                  "endtime": 1461062898,
-                  "type": "barchart"
-              },
-              "col": 0,
-              "row": 3
-          },
-          {
-              "loading": false,
-              "title": "HostStats 24h",
-              "type": "piechart",
-              "sizeX": 2,
-              "sizeY": 3,
-              "content": "Example of own filter",
-              "config": {
-                  "filter_value": "cz.cesnet.nemea.hoststats",
-                  "metric": "Category",
-                  "period": "24",
-                  "filter_field": "Node.Name",
-                  "filter": true,
-                  "begintime": 1460976498,
-                  "endtime": 1461062898,
-                  "type": "piechart"
-              },
-              "col": 3,
-              "row": 5
-          }
-      ],
-      "settings": {
-          "timeshift": "0",
-          "interval": "60",
-          "title": "Default"
-      }
-  }]
-};
-
-db.users.insert(d);
-'
-
-# install and start backend
-
-cp nemea-dashboard.service "`pkg-config --variable=systemdsystemunitdir systemd`"
-
-systemctl enable nemea-dashboard
-
-service nemea-dashboard start
-
-SCRIPT
-