I work for a government entity and that is the policy here. Thanks. From: [email protected] [mailto:[email protected]] On Behalf Of Enrico Kern Sent: Tuesday, November 22, 2016 4:04 PM To: [email protected] Subject: Re: [Ntop] Does ntopng accept IPFIX logs from an F5 BigIP appliance?
Sorry but why can you only send a pcap to vendor with a support contract to you? Is that a compliance reason from your company or something from F5 ? Just curious. On Tue, Nov 22, 2016 at 10:00 PM, Mcdonald, Scott <[email protected]<mailto:[email protected]>> wrote: Hi Luca, The fact that it should work with ntopng gives me some hope. I’m only able to send a pcap to a vendor I have a commercial support agreement with so I will open a ticket with F5 Networks on this. Thanks for the response and I may reach out to the mailing list again if F5 is not helpful. From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Luca Deri Sent: Tuesday, November 22, 2016 3:26 PM To: [email protected]<mailto:[email protected]> Subject: Re: [Ntop] Does ntopng accept IPFIX logs from an F5 BigIP appliance? Scott if the flows are compliant with the specification and contain all fields like, time, IP, protocol bytes etc it will work. If this is not the case I need to see a pcap with flows+template as there’s something to fix. You can send me the pcap privately if you want/can Regards Luca On 22 Nov 2016, at 15:40, Mcdonald, Scott <[email protected]<mailto:[email protected]>> wrote: I’m trying to send IPFIX logs to ntopng/nprobe from my BigIP load balancer as described in this article: https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-11-5-0/8.html<https://urldefense.proofpoint.com/v2/url?u=https-3A__support.f5.com_kb_en-2Dus_products_big-2Dip-2Dafm_manuals_product_network-2Dfirewall-2Dpolicies-2Dimplementations-2D11-2D5-2D0_8.html&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=j-nRHdU_DiGtsbI3aYxM6NJln7Y_aGRgACxhKoQtKZM&e=>. I believe I have followed the steps correctly but ntopng does not appear to be picking up any events. Before reaching out to F5 support I just wanted to check with this list to see if what I am attempting is even possible with ntopng/nprobe. Thanks. ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager at postmaster at dor.state.ma.us<http://dor.state.ma.us/>. ********************************************************************** _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop<https://urldefense.proofpoint.com/v2/url?u=http-3A__listgateway.unipi.it_mailman_listinfo_ntop&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=KPKdy9Z_C2rir4t3Aj45QERPr_4c8WfW-XK67zA0mDs&e=> _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop<https://urldefense.proofpoint.com/v2/url?u=http-3A__listgateway.unipi.it_mailman_listinfo_ntop&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=ITfuExxP71ZbYYE9rVaro4yG1s3uiKdCQA787pTxRZs&s=GuLRt9V5eE2zjWBUicTPt78qTW1FUcvLXheQTYjloxU&e=> -- Enrico Kern Lead System Engineer glispa GmbH Sonnenburger Straße 73 10437 Berlin, Germany tel: +49 30 5557130-17 fax: +49 30 5557130-50 skype: flyersa [email protected]<mailto:[email protected]> www.glispa.com<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.glispa.com&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=ITfuExxP71ZbYYE9rVaro4yG1s3uiKdCQA787pTxRZs&s=i_RT7erJOnAkFrl0W-BkV9aNbDKxn4eyVUPmjbTWhzc&e=> __________________________________________ Sitz Berlin, AG Charlottenburg HRB 114678B
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
