-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

CISCO ASA is a total different story. Although it uses v9 to export data, it 
has it's own template with lots of
extensions, which standard nfdump does not understand. There is a version on 
Sourceforge nfdump-1.5.7-nsel, which
contains patches/extension, written by CISCO. So you may use this release for 
CISCO ASA. These patches will be
integrated into nfdump-1.6, once it is finally released, so updated nfdump 
1.6.1 will understand ASA too. In the
meantime, use nfdump-1.5.7-nsel.

David Bowman wrote:
> Hello,
> 
> I got nfsen installed and running without too much problems, it looks
> like it will really be helpful, but I'm only seeing Flow graphs. The
> Packet and Traffic graphs are all empty. 
> 
> I'm using one device, a Cisco ASA 5510, sending all events, and sending
> templates every 4 minutes. Running nfsen under openSUSE.
> 
> I suspect my problem is that nfdump is not showing the correct date/time
> on the flows. And it's not just off my a few hours, it's off by over a
> month. It thinks today, December 15, is October 29. The date/time is
> correct on the ASA and the linux box, they sync from the same ntp
> source.
> 
> Is there some issue with an ASA and openSUSE using different unix time
> bases?

Is your ASA box set to the correct time?

        - Peter
> 
> David Bowman
> Nemetschek North America
> 
> 
> ------------------------------------------------------------------------------
> This SF.Net email is sponsored by the Verizon Developer Community
> Take advantage of Verizon's best-in-class app development support
> A streamlined, 14 day to market process makes app distribution fast and easy
> Join now and get one step closer to millions of Verizon customers
> http://p.sf.net/sfu/verizon-dev2dev 
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: [email protected] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iQCVAwUBSyi3rv5AbZRALNr/AQLiVwP/VPMZOXurJMC/RPmVFhitcKSMiDqvxfDH
X4GomThK5ZrWlvQIQ2zgDhveAVRGyyNLnsQDEkyKZLqob3uI0GbiON9pOckHXyA7
vHMOrmvpMBPOcdHE2dcidqCQBzPQtvZj1YiMQhH+80vEa2r/ApWsie2VW7+fpBMw
ewlEBJA8+GM=
=59ky
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to