Taken this might be due to poor flow information exported by the Sonicwall.
Can you please send me (not to everyone) a pcap with flows+templates sent from your Sonicwall so I can see what happens? Regards Luca > On 3 Oct 2016, at 09:52, 田中ザック <[email protected]> wrote: > > Hello, > > I have a sonicwall exporting flow data by ipfix to a nprobe collector and > then ntop pro analyzing it, however all of the first/last seen dates are: > 01/01/1970 09:00:01 > > so all flows show a duration of less than 1 second. > > The dates are correctly configured on the router and collector. > > Has anyone seen this before? > > Thanks. > Takuan > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
