The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
3answers
83 views

How to see traffic traversing a Cisco ASA by inside host?

I have a Cisco ASA 5515 running 9.1 and am interested in learning how I can see bandwidth usage by individual hosts. For instance, using MRTG I can see that my average bandwidth utilization is approx ...
0
votes
3answers
454 views

Netflow packet includes zero port numbers?

What does a zero source port number indicate? Can Netflow tell about something a connection that is not TCP or UDP? Thanks.
2
votes
2answers
821 views

Problems with getting both ingress and egress Netflow data

I have a Cisco 6500 switch that I want to capture all vlan8 traffic incoming and outgoing. I talked with my networking group and they set me up with the following commands. (May not be exact commands ...
2
votes
1answer
68 views

What is the difference between flow-cat and flow-merge?

I am trying to create some monitoring based on flow-tools: I have flow-capture running to log things into directories. Now I need to merge files together for my analysation interval. I have looked at ...
2
votes
1answer
291 views

How useful is the sysUptime value in a Netflow packet?

The value is in theory precise down to the millisecond, but I am skeptical. Does that number tell when the packet was transmitted, or when the connection began or ended? Note: Subsequently I ...
1
vote
1answer
663 views

Netflow to syslog converter

Is there any way to have netflow v9 converted to syslog? Which would be the best way to have the following idea working? Procedure: 1) The router sends UDP with the following structure: ...
0
votes
1answer
100 views

CA Network Flow Analysis - sFlow Monitoring Issues

I've been attempting to monitor sFlow traffic from some F5 LTMs, but I'm getting figures like 9 terabytes of data over http, which I don't believe we are getting. Has anyone else had issues like this ...
3
votes
0answers
264 views

How to support VRF in Netflow Collector?

I am somehow able to analyze netflow packet using my own netflow collector (build in python). It works for certain ip and CIDR(Classless Inter Domain routing), definitely not overlapping. What is the ...
0
votes
0answers
16 views

Configuration verification - NetFlow issues

I'm actually configuring NetFlow on my organization network. I use SolarWinds Orion with NetFlow Traffic Analyzer as collector and got 30 routers. I want to monitor WAN interfaces (one hot and one ...
0
votes
0answers
16 views

flowscan or cflow can't create valid rrd files

I have flow-tools installed on centos 5 32 bit machine, flow-capture creates netflow log files and flowscan takes them and converts to rrd files using cuflow, then cugrapher.pl draws graphs in the ...
0
votes
0answers
33 views

What is the Cisco 7200 VXR Netflow Default Sample Rate?

I am trying to collect netflow data from a Cisco 7200 VXR router. I need to specify the sample rate, but I cannot seem to get the information from the cisco router and I do not know what the default ...
0
votes
0answers
12 views

In WUG, what is the best approach to “Alert” on missing top conversations?

I want to alert on abnormal traffic, specifically: Constant traffic that drops over a certain threshold (Specifically Recoverpoint, SRM, or Exchange logs) Intelligent analytics: (I should see 5GB of ...
0
votes
0answers
79 views

wireshark not showing netflow source addresses nfdump does

Hi guys i'm experiencing following issue, hope someone can explain me what's happening. I got a pcap with a dump of udp packets containing netflow data. I've used tcprewrite and tcpreplay to ...