Marat,
Typically Cisco ASA emits flows on the basis of an event such as, for
example, "a Flow is deleted" or "a Flow is denied". You have to configure
your ASA in order to get proper flow exports for the events you care.
This is the Cisco ASA NetFlow implementation that explains in detail:
On 26/01/17 15:09, Robert Williams wrote:
The Cisco uses 1 in 20 sampling for Netflow
Sorry for deviation, do you know what Ciscos use it? I have very strange
results with ntop+netflow on Cisco ASA here (fw 9.6.2), but cannot find
time to investigate. No Cisco ASA documents on netflow mention
14:44
To: n...@unipi.it
Subject: Re: [Ntop] Sampling factor for Flows
Robert,
See option
[--collector-sample-rate]| Specify the bytes/pkts collection sample
rate (NetFlow only).
Regards,
Simone
On Thu, Jan 26, 2017 at 1:09 PM, Robert Williams
<rob...@custodiandc.com<mail
