-
While aggregating IPFIX information using nfacct and custom defined primitives, elements like OctetDeltaCount (id = 1), packetDetaCount (id = 2), ingressInterface (id = 10) and many more collects valu…
-
Hello Rob,
I recently set up Elastiflow 3.3.0 on ELK 6.3.0. All is working smooth, IPFIX and Netflow v9 from Cisco devices is collected and graphed like a charm.
But I have an issue with collectin…
-
Hi,
Is there way to find the client(initiator who started the conversation) request in the netflow data ?
Is there way to apply aggregate filter to get only the initial request ?
-
Hi,
When debugging sysrepo client with all debugs on, it sometimes takes more that 1s to finish edit-config transaction. It appears that there is some timeout in libnetconf2/netopeer2 - the max time …
-
Hi,
I am trying to get to the bottom of an issue with our netflow implementation of Elastiflow.
Basically, we are seeing a lot of data going too and from 0.0.0.0... An example flow received by Ela…
-
Actually, it seems, it can not compiled with kernel 5.6.0+ (tried today with 5.6.2)
```
./configure --disable-dkms --enable-aggregation --enable-direction --enable-macaddress --enable-vlan --ipt-l…
-
**Kibana version:**
7.4
**Elasticsearch version:**
7.4
**Filebeat version:**
7.4
SIEM App always shows 0 bytes for Netflow data. Filebeat, however, transmits correct data.
This problem exists i…
-
Would it be possible to know what are the steps needed to enable Threat Protection on the Azure Network Layer? Would it be possible to have an idea of which are the resource that under that scope, is …
-
### Brief description
IPFIX is now re-using NetflowTemplateFieldV9 for template records. But IPFIX extends the format of Netflow protocol. According to [IPFIX RFC](https://tools.ietf.org/html/rfc70…
ir193 updated
4 years ago
-
Using a Mikrotik unit, RouterOS 6.39.2, configured with IPFIX, everything works fine with a limited number of fields being shipped. However, when activating what Mikrotik refers to as "NAT Src Address…