Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NTop: Users

Palo Alto Netflow v9

 

 

NTop users RSS feed   Index | Next | Previous | View Threaded


cmoore at fpdigital

Jun 22, 2012, 8:23 AM

Post #1 of 3 (411 views)
Permalink
Palo Alto Netflow v9

Hi folks,

I'm hoping that someone has dealt with this before. I have a Palo Alto PA-2050 firewall. I have it configured for Netflow – it only does v9. Ntop is receiving the flows from it just fine and recognizes them as v9, but is discarding them as either zero packet count or zero byte count. Looking at the flows it does look like there are a certain number of flows with zero counts, but certainly not all by a long stretch. I'd like to see if anyone has run into this before and if not I'll go ahead and post some flows and see where we can go from there.

Thanks for your help,

Chris Moore


sbrenner at sabdev

Jun 22, 2012, 9:17 AM

Post #2 of 3 (383 views)
Permalink
Re: Palo Alto Netflow v9 [In reply to]

I filed a bug several months ago asking for support, but I am guessing that Luca hasn't had time to work on it.

https://www.ntop.org/bugzilla3/show_bug.cgi?id=219

-Scott

On Jun 22, 2012, at 8:23 AM, Moore, Chris wrote:

> Hi folks,
>
> I'm hoping that someone has dealt with this before. I have a Palo Alto PA-2050 firewall. I have it configured for Netflow – it only does v9. Ntop is receiving the flows from it just fine and recognizes them as v9, but is discarding them as either zero packet count or zero byte count. Looking at the flows it does look like there are a certain number of flows with zero counts, but certainly not all by a long stretch. I'd like to see if anyone has run into this before and if not I'll go ahead and post some flows and see where we can go from there.
>
> Thanks for your help,
>
> Chris Moore
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


sbrenner at sabdev

Jun 22, 2012, 9:17 AM

Post #3 of 3 (382 views)
Permalink
Re: Palo Alto Netflow v9 [In reply to]

I filed a bug several months ago asking for support, but I am guessing that Luca hasn't had time to work on it.

https://www.ntop.org/bugzilla3/show_bug.cgi?id=219

-Scott

On Jun 22, 2012, at 8:23 AM, Moore, Chris wrote:

> Hi folks,
>
> I'm hoping that someone has dealt with this before. I have a Palo Alto PA-2050 firewall. I have it configured for Netflow – it only does v9. Ntop is receiving the flows from it just fine and recognizes them as v9, but is discarding them as either zero packet count or zero byte count. Looking at the flows it does look like there are a certain number of flows with zero counts, but certainly not all by a long stretch. I'd like to see if anyone has run into this before and if not I'll go ahead and post some flows and see where we can go from there.
>
> Thanks for your help,
>
> Chris Moore
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop

NTop users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.