On 28/02/2018 11:11, Giles Coochey wrote:
Hi,
I'm really liking the NSEL feature within nfdump, but I have a question:
I see that I can view "DENIED" flows from the Cisco ASA in nfdump.
Is there a way to filter for DENIED flows within the Netflow
Processing in Nfsen, for example list the flows that were denied from
a certain source IP within a given time period?
Reply by myself:
"asa event deny" - does the trick.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
