Hello,
We've just put to service a new ASA 5525 v9.5(2) and I am trying to
integrate it in nfsen (1.3.6p1 with nfdump v1.6.13), which has proved
invaluable to me. (Thanks!)
First impressions show that things work, but I don't see any packet
stats. I've seen in older nfsen mailing list threads that this behavior
has been reported again on ASAs.
The question: Any advice on how to integrate packet stats from ASA flows?
Packet stats (as exported from Cisco IOS routers) have been very useful
and have helped us to identify network abuse and hacked
workstations/servers.
Note: Since v9.1 the following command is available:
flow-export active refresh-interval 5
and I am using it as above (in contrast to the default value of 1)
Any other experience and advice on ASA netflow usage (to avoid pitfalls)
would be welcome!
Best regards,
Nick
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
