'Re: [Ntop] Cisco ASA Netflow Template Support'

[prev in list] [next in list] [prev in thread] [next in thread] 

List: ntop
Subject: Re: [Ntop] Cisco ASA Netflow Template Support
From: Luca Deri <deri () ntop ! org>
Date: 2010-05-12 9:39:12
Message-ID: 4BEA7740.8080503 () ntop ! org
[Download RAW message or body]

[Attachment #2 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
 <meta content="text/html; charset=ISO-8859-1"
 http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
Florian 
this problem is still pending. It requires me to define some
pre-defined templates as Cisco (who has created the NetFlow standard)
is not following the standard itself. This takes time and it's ion the
to-do list 
 
Luca 
 
On 05/11/2010 10:51 AM, Florian Bauhaus wrote:
<blockquote cite="mid:20100511105148.0000029c@mond" type="cite">
 <pre wrap="">Hi,
I wonder if there is finally any solution for this issue? I wanted to
give ntop another try but even with the latest svn version I am still
experiencing this problem. I could provide a .pcap files with flow data
if needed.

Best regards
Florian

Packets Received 				5,106,172
Packets with Bad Version 			0
Packets Processed 				5,106,172
Valid Flows Received 				47,972,231
Average Number of Flows per Packet 		21.7
V1 Flows Received 				0
V5 Flows Received 				0
V7 Flows Received 				0
V9 Data Flows Received 				47,972,231
V9 Option Flows Received 			0
Total V9 Templates Received 			4,443
V9 Flows with Unknown Templates Received 	15,006,076

Discarded Flows
Flows with Zero Packet Count 			47,972,231
Flows with Zero Byte Count 			0
Flows with Bad Data 				0
Flows with Unknown Template 			15,006,076
Total Number of Flows Processed 		0

On Thu, 10 Sep 2009 16:21:26 +0200
Luca Deri <a class="moz-txt-link-rfc2396E" \
href="mailto:deri@ntop.org">&lt;deri@ntop.org&gt;</a> wrote:

  </pre>
  <blockquote type="cite">
    <pre wrap="">Ryan
please send me another .pcap file containing flows I can use for  
reproducing the issue

Luca

On Sep 10, 2009, at 4:12 PM, Ryan Sumner wrote:

    </pre>
    <blockquote type="cite">
      <pre wrap="">Luca,

I grabbed the latest version from SVN, compiled, it and installed
it. After about 30 minutes, I saw the netflow statistics start to
look a little better than they did before.  I'm still not seeing
any traffic information in ntop though.

Here's the output from the NetFlow Statistics:

NetFlow Statistics
Device 1 - NetFlow-device.2
Received Flows
Flow Senders 	
Sender		Pkts	Flows	Lost
192.168.1.1:8694	6,428	6,428	0
Packets Received 				6,428
Packets with Bad Version 			0
Packets Processed 				6,428
Valid Flows Received 			4,589
Average Number of Flows per Packet 		3.0
V1 Flows Received 				0
V5 Flows Received 				0
V7 Flows Received 				0
V9 Data Flows Received 			4,589
V9 Option Flows Received 			3
Total V9 Templates Received 		1,824
Bad V9 Templates Received 			445
V9 Flows with Unknown Templates Received 	10,214

Discarded Flows
Flows with Zero Packet Count 		4,589
Flows with Zero Byte Count 			0
Flows with Bad Data 			0
Flows with Unknown Template 		10,214
Total Number of Flows Processed 		0
      </pre>
    </blockquote>
  </blockquote>
  <pre wrap=""><!---->
_______________________________________________
Ntop mailing list
<a class="moz-txt-link-abbreviated" \
href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a> <a \
class="moz-txt-link-freetext" \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/mailman/listinfo/ntop</a>
  </pre>
</blockquote>
<br>
</body>
</html>

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

[prev in list] [next in list] [prev in thread] [next in thread] 