Hi Nfsen Folks,
I have a strange problem with a new Nfsen Installation with a interface filter.
While settings up a new Profile with individual Channels selected, filter set
as follows:
Channel 1
device, +, in if 38
Channel 2
device, -, out if 38
I tried multiple variations, also with a single channel and a shadow profile,
neither combination does work. It is not that just the graphs are not created,
I checked the nfcapd files with nfdump, they are staying empty. It just seems
that no traffic is captured matching this filter. Reporting device is a netflow
v9 capable Firewall. Profiles in general do work, no problems with ports or
source/destination filters, its just the "in/out if" that refuses to work.
The strange thing is, if I apply the same filter on the "live" profile, I can
see the corresponding traffic. I checked with nfdump -o raw on the live profile
nfcapd files and I can confirm that the interface index (input/output field) is
correct and actually gets recorded.
Used versions
nfsen 1.3.6p1
nfdump, nfcapd is version 1.6.11
Did anyone encounter the same problem by any chance?
Thanks a lot
Kind regards
Chris
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
