Sorry but why can you only send a pcap to vendor with a support contract to you? Is that a compliance reason from your company or something from F5 ? Just curious.
On Tue, Nov 22, 2016 at 10:00 PM, Mcdonald, Scott <[email protected] > wrote: > Hi Luca, > > The fact that it should work with ntopng gives me some hope. I’m only > able to send a pcap to a vendor I have a commercial support agreement with > so I will open a ticket with F5 Networks on this. Thanks for the response > and I may reach out to the mailing list again if F5 is not helpful. > > > > > > *From:* [email protected] [mailto:ntop-bounces@ > listgateway.unipi.it] *On Behalf Of *Luca Deri > *Sent:* Tuesday, November 22, 2016 3:26 PM > *To:* [email protected] > *Subject:* Re: [Ntop] Does ntopng accept IPFIX logs from an F5 BigIP > appliance? > > > > Scott > > if the flows are compliant with the specification and contain all fields > like, time, IP, protocol bytes etc it will work. If this is not the case I > need to see a pcap with flows+template as there’s something to fix. You can > send me the pcap privately if you want/can > > > > Regards Luca > > > > On 22 Nov 2016, at 15:40, Mcdonald, Scott <[email protected]> > wrote: > > > > I’m trying to send IPFIX logs to ntopng/nprobe from my BigIP load balancer > as described in this article: https://support.f5. > com/kb/en-us/products/big-ip-afm/manuals/product/network- > firewall-policies-implementations-11-5-0/8.html > <https://urldefense.proofpoint.com/v2/url?u=https-3A__support.f5.com_kb_en-2Dus_products_big-2Dip-2Dafm_manuals_product_network-2Dfirewall-2Dpolicies-2Dimplementations-2D11-2D5-2D0_8.html&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=j-nRHdU_DiGtsbI3aYxM6NJln7Y_aGRgACxhKoQtKZM&e=> > . I believe I have followed the steps correctly but ntopng does not > appear to be picking up any events. Before reaching out to F5 support I > just wanted to check with this list to see if what I am attempting is even > possible with ntopng/nprobe. Thanks. > > ********************************************************************** > > This email and any files transmitted with it are confidential and intended > solely for the use of the individual or entity to whom they are addressed. > If you have received this email in error please notify the system manager > at postmaster at dor.state.ma.us. > > ********************************************************************** > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > <https://urldefense.proofpoint.com/v2/url?u=http-3A__listgateway.unipi.it_mailman_listinfo_ntop&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=KPKdy9Z_C2rir4t3Aj45QERPr_4c8WfW-XK67zA0mDs&e=> > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > -- Enrico Kern Lead System Engineer glispa GmbH Sonnenburger Straße 73 10437 Berlin, Germany tel: +49 30 5557130-17 fax: +49 30 5557130-50 skype: [email protected] __________________________________________ Sitz Berlin, AG Charlottenburg HRB 114678B
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
