I'm no expert, but I've been collecting ASA netlow data from 5 ASAs for
years, and have found they behave quite strangely.
My understanding is that you *cannot* collect packet data because of the
way they process traffic. Flows/s data seems good though. Here's my
last 7 days...
Further the actual byte counts seem to get reported at the end of the
connection, not during the connection like on most devices. So your
traffic graphs end up looking really goofy. For instance we run backups
across a VPN at night, and much of the backup traffic gets reported all
at once - showing a really big spike right around when the backup ends.
Really quite useless.
Here's what I'm talking about:
If there's a way around this, I would love to know what it is.
On 04/06/2016 05:52 AM, Nikolaos Milas wrote:
On 2/4/2016 1:19 μμ, Nikolaos Milas wrote:
According to nfsen, our input / output rates (on main interface) were
2.2 / 1.2 Mbps respectively for some period, whereas from within ASA I
can see that the real rates should be at around 6 / 6 Mbps for the same
period.
...
Also, no packet stats are available!
Anyone please?
Why nfsen does not report ASA traffic correctly?
Why there are no packet stats available?
Nick
------------------------------------------------------------------------------
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
------------------------------------------------------------------------------
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
