I did come across that, but unfortunately we're not using ASA's.  Also, the 
fragments seem to be making it to the ntop host in good shape, so not sure if 
it will help or not.  Thanks though!  Later I'll run ntop with netflow in debug 
mode and try to correlate stuff.

----- Original Message -----
From: Vivek Rajagopalan [mailto:[email protected]]
Sent: Tuesday, May 31, 2011 09:29 PM
To: [email protected] <[email protected]>
Subject: Re: [Ntop] Cisco netflow packet size - adjusting?



On 01-06-2011 01:20, Gary Gatten wrote:
> I believe the source router fragments - the MTU on the IPSec+GRE tunnel is 
> 1400 bytes.


Does this link help ?

http://www.plixer.com/blog/general/interesting-cisco-asa-netflow-fragmentation-issue/





_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop





<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 
1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to