-
Always show me,
[2020-04-03T15:32:02,443][DEBUG][logstash.codecs.netflow ][elastiflow] Start processing data flowset 260
[2020-04-03T15:32:02,443][WARN ][logstash.codecs.netflow ][elastiflow] Can'…
-
Hello.
I'm trying to use the TCP collector with TLS support and had configured startup.xml like this
>
TCP collector
Listening port 4740
4740
192.168.126.135
/…
-
I am running pmacctd and nfacctd with the intent of labeling the exported flows with custom primitives, specifically from IPFIX packtes, but I am unable to add custom primitives. I have followed the Q…
-
Nfdump is reporting "1970-01-01 00:00:00" for "first" and "last" using raw output. I suspect it's the Sophos that is at fault here. Wireshark is displaying the right times, but in looking at the templ…
-
I can see
```
[ytti@netflow2]~% /data2/local/bin/nfdump -E /data2/nfsen/data/profiles-data/live/ruuter1/2019/09/21/nfcapd.201909211905
Exporters:
SysID: 1, IP: 10.250.0.149, version: 10, ID: …
-
ilmarh's example from: https://github.com/britram/python-ipfix/issues/17 works great for Netflow v9 (at least with my limited testing).
When I add `import ipfix.reader`, and change his `r = ipfix.v…
-
Subject!
-
Hi together,
i have an problem with the app identifictation in elastiflow. only a few app are identified.
Version of elastiflow is 3.5.1
Version of elk is 7.3.1
Version of Sophos UTM is 9.605…
-
Hello,
I have being testing the fastnetmon service and it is working but the PPS and the Mbps are not being calculated correctly.
I read many post and adjust the average_calculation_time, settin…
-
i did a git clone of elastiflow then did a docker-compose up -d. kibana doesn't want to start and has the following errors:
```
{"type":"log","@timestamp":"2019-05-18T23:08:08Z","tags":["error","…