The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
3answers
266 views

How to see traffic traversing a Cisco ASA by inside host?

I have a Cisco ASA 5515 running 9.1 and am interested in learning how I can see bandwidth usage by individual hosts. For instance, using MRTG I can see that my average bandwidth utilization is approx ...
0
votes
3answers
655 views

Netflow packet includes zero port numbers?

What does a zero source port number indicate? Can Netflow tell about something a connection that is not TCP or UDP? Thanks.
2
votes
2answers
1k views

Problems with getting both ingress and egress Netflow data

I have a Cisco 6500 switch that I want to capture all vlan8 traffic incoming and outgoing. I talked with my networking group and they set me up with the following commands. (May not be exact commands ...
2
votes
1answer
87 views

What is the difference between flow-cat and flow-merge?

I am trying to create some monitoring based on flow-tools: I have flow-capture running to log things into directories. Now I need to merge files together for my analysation interval. I have looked at ...
2
votes
1answer
363 views

How useful is the sysUptime value in a Netflow packet?

The value is in theory precise down to the millisecond, but I am skeptical. Does that number tell when the packet was transmitted, or when the connection began or ended? Note: Subsequently I ...
1
vote
1answer
72 views

MikroTik - Traffic flow (Netflow) Octets Counter wrap

I am using Traffic Flow with pmacct (nfacct) to do IP Accounting. I've noticed that if a flow exceeds ~4GBytes in less than a minute (which is my active-flow-timeout) the exported flow Octets counter ...
1
vote
1answer
877 views

Netflow to syslog converter

Is there any way to have netflow v9 converted to syslog? Which would be the best way to have the following idea working? Procedure: 1) The router sends UDP with the following structure: ...
0
votes
1answer
120 views

CA Network Flow Analysis - sFlow Monitoring Issues

I've been attempting to monitor sFlow traffic from some F5 LTMs, but I'm getting figures like 9 terabytes of data over http, which I don't believe we are getting. Has anyone else had issues like this ...
4
votes
0answers
363 views

How to support VRF in Netflow Collector?

I am somehow able to analyze netflow packet using my own netflow collector (build in python). It works for certain ip and CIDR(Classless Inter Domain routing), definitely not overlapping. What is the ...
0
votes
0answers
20 views

How to configure netflow on linux bridges(“docker0” Bridge)

I have Openstack setup which one of the compute node has docker and if I want to monitor the traffic, how to configure netflow on "docker0" bridge/Linux Bridge. I can see the bridge name and ID with ...
0
votes
0answers
30 views

flowscan or cflow can't create valid rrd files

I have flow-tools installed on centos 5 32 bit machine, flow-capture creates netflow log files and flowscan takes them and converts to rrd files using cuflow, then cugrapher.pl draws graphs in the ...
0
votes
0answers
54 views

What is the Cisco 7200 VXR Netflow Default Sample Rate?

I am trying to collect netflow data from a Cisco 7200 VXR router. I need to specify the sample rate, but I cannot seem to get the information from the cisco router and I do not know what the default ...