Hi Luca, The fact that it should work with ntopng gives me some hope. I’m only able to send a pcap to a vendor I have a commercial support agreement with so I will open a ticket with F5 Networks on this. Thanks for the response and I may reach out to the mailing list again if F5 is not helpful.
From: [email protected] [mailto:[email protected]] On Behalf Of Luca Deri Sent: Tuesday, November 22, 2016 3:26 PM To: [email protected] Subject: Re: [Ntop] Does ntopng accept IPFIX logs from an F5 BigIP appliance? Scott if the flows are compliant with the specification and contain all fields like, time, IP, protocol bytes etc it will work. If this is not the case I need to see a pcap with flows+template as there’s something to fix. You can send me the pcap privately if you want/can Regards Luca On 22 Nov 2016, at 15:40, Mcdonald, Scott <[email protected]<mailto:[email protected]>> wrote: I’m trying to send IPFIX logs to ntopng/nprobe from my BigIP load balancer as described in this article: https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-11-5-0/8.html<https://urldefense.proofpoint.com/v2/url?u=https-3A__support.f5.com_kb_en-2Dus_products_big-2Dip-2Dafm_manuals_product_network-2Dfirewall-2Dpolicies-2Dimplementations-2D11-2D5-2D0_8.html&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=j-nRHdU_DiGtsbI3aYxM6NJln7Y_aGRgACxhKoQtKZM&e=>. I believe I have followed the steps correctly but ntopng does not appear to be picking up any events. Before reaching out to F5 support I just wanted to check with this list to see if what I am attempting is even possible with ntopng/nprobe. Thanks. ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager at postmaster at dor.state.ma.us<http://dor.state.ma.us/>. ********************************************************************** _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop<https://urldefense.proofpoint.com/v2/url?u=http-3A__listgateway.unipi.it_mailman_listinfo_ntop&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=KPKdy9Z_C2rir4t3Aj45QERPr_4c8WfW-XK67zA0mDs&e=>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
