The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
3answers
313 views

How to see traffic traversing a Cisco ASA by inside host?

I have a Cisco ASA 5515 running 9.1 and am interested in learning how I can see bandwidth usage by individual hosts. For instance, using MRTG I can see that my average bandwidth utilization is approx ...
0
votes
3answers
691 views

Netflow packet includes zero port numbers?

What does a zero source port number indicate? Can Netflow tell about something a connection that is not TCP or UDP? Thanks.
2
votes
2answers
1k views

Problems with getting both ingress and egress Netflow data

I have a Cisco 6500 switch that I want to capture all vlan8 traffic incoming and outgoing. I talked with my networking group and they set me up with the following commands. (May not be exact commands ...
2
votes
1answer
97 views

What is the difference between flow-cat and flow-merge?

I am trying to create some monitoring based on flow-tools: I have flow-capture running to log things into directories. Now I need to merge files together for my analysation interval. I have looked at ...
2
votes
1answer
395 views

How useful is the sysUptime value in a Netflow packet?

The value is in theory precise down to the millisecond, but I am skeptical. Does that number tell when the packet was transmitted, or when the connection began or ended? Note: Subsequently I ...
1
vote
1answer
164 views

MikroTik - Traffic flow (Netflow) Octets Counter wrap

I am using Traffic Flow with pmacct (nfacct) to do IP Accounting. I've noticed that if a flow exceeds ~4GBytes in less than a minute (which is my active-flow-timeout) the exported flow Octets counter ...
1
vote
1answer
949 views

Netflow to syslog converter

Is there any way to have netflow v9 converted to syslog? Which would be the best way to have the following idea working? Procedure: 1) The router sends UDP with the following structure: ...
0
votes
1answer
128 views

CA Network Flow Analysis - sFlow Monitoring Issues

I've been attempting to monitor sFlow traffic from some F5 LTMs, but I'm getting figures like 9 terabytes of data over http, which I don't believe we are getting. Has anyone else had issues like this ...
4
votes
0answers
392 views

How to support VRF in Netflow Collector?

I am somehow able to analyze netflow packet using my own netflow collector (build in python). It works for certain ip and CIDR(Classless Inter Domain routing), definitely not overlapping. What is the ...
0
votes
0answers
16 views

Issue with nfsen in fetching sflow data from Linux host

I have two VMs. The first VM is at AWS EC2 instance (red hat). I am using this system as sflow agent. I have installed hsflowd in this machine. My hsflowd.conf file looks like following: DNSSD = ...
0
votes
0answers
35 views

Best way to collect Netflow Accounting to store in Elasticsearch

currently i'm trying to figure out the best and most efficient way to collect NetFlow Accounting data. I decided to use Elasticsearch for indexing and Kibana (or maybe QBana) for data analysis. I ...
0
votes
0answers
53 views

How to configure netflow on linux bridges(“docker0” Bridge)

I have Openstack setup which one of the compute node has docker and if I want to monitor the traffic, how to configure netflow on "docker0" bridge/Linux Bridge. I can see the bridge name and ID with ...
0
votes
0answers
59 views

What is the Cisco 7200 VXR Netflow Default Sample Rate?

I am trying to collect netflow data from a Cisco 7200 VXR router. I need to specify the sample rate, but I cannot seem to get the information from the cisco router and I do not know what the default ...