Hello Wolfgang, I'd like to, but I have no working config available, such ASA is not at my service :( Maybe someone else has its own working ASA NetFlow export and will post it.
By the way, have you tried to contact Cisco support? They'll surely help you! Regards Jan, Jan Pazdera <pazdera at invea.cz> INVEA-TECH a.s. U Vodarny 2965/2, 61600 Brno, Czech Republic Tel: +420 541 142 051 www.invea-tech.com Key 0x89F62F78: 41A7 28C2 C624 FBD1 E236 6827 42EB 3694 89F6 2F78 Dne 24.6.2010 10:58, [email protected] napsal(a): > Hello Jan, > > is it possible to post the relevant part of an working asa-config > to the list? > > > Here is my very minimal config: > > > flow-export destination lognet nfdumpsrv 9995 > flow-export template timeout-rate 5 > flow-export delay flow-create 30 > > > > Mit freundlichen Gruessen > > Wolfgang Wagner > Systemadministration > > RIWA GmbH > Gesellschaft fuer Geoinformationen > Zwingerstr. 2, 87435 Kempten > > Tel: +49 (0) 831 / 522963-537 > Fax: +49 (0) 831 / 522963-546 > E-Mail: [email protected] > http://www.riwa-gis.de > > > >> Hi Vilberg, >> >> yes it is working well. I sometimes face admins having problems to >> configure the netflow export on cisco. It is exporting something, which >> has a correct IP addresses and ports but has wrong TCP flags. For >> example it often exports TCP flags in UDP flows. I am not sure about the >> exact reason of this issue but it can be fixed with correct configuration. >> >> Regards, >> Jan >> >> Jan Pazdera <pazdera at invea.cz> >> INVEA-TECH a.s. >> U Vodarny 2965/2, 61600 Brno, Czech Republic >> Tel: +420 541 142 051 >> http://www.invea-tech.com >> Key 0x89F62F78: 41A7 28C2 C624 FBD1 E236 6827 42EB 3694 89F6 2F78 >> >> >> >> Dne 21.6.2010 15:49, Vilberg Eiríksson napsal(a): >> >>> Hello, >>> >>> ...has anyone used nfsen/nfdump with netflow data from a cisco ASA box? >>> >>> Regards, >>> >>> Vilberg >>> >>> > RIWA GmbH, Zwingerstrasse 2, 87435 Kempten > Sitz der Gesellschaft: Kempten (Allgaeu) > Registergericht: Amtsgericht Kempten, HRB 6480 > Geschaeftsfuehrer: Dipl.-Ing. Guenter Kraus > > > ------------------------------------------------------------------------------ > ThinkGeek and WIRED's GeekDad team up for the Ultimate > GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the > lucky parental unit. See the prize list and enter to win: > http://p.sf.net/sfu/thinkgeek-promo > _______________________________________________ > Nfsen-discuss mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss > ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
