If you get no response from f5 i might step in and provide a pcap from our f5 (not using it atm with ntop) but i need some time for that. let me know.
On Tue, Nov 22, 2016 at 10:07 PM, Enrico Kern <[email protected]> wrote: > ah that explains alot. Thank you for enlighting me :) > > On Tue, Nov 22, 2016 at 10:06 PM, Mcdonald, Scott < > [email protected]> wrote: > >> I work for a government entity and that is the policy here. Thanks. >> >> >> >> *From:* [email protected] [mailto:ntop-bounces@listgatew >> ay.unipi.it] *On Behalf Of *Enrico Kern >> *Sent:* Tuesday, November 22, 2016 4:04 PM >> >> *To:* [email protected] >> *Subject:* Re: [Ntop] Does ntopng accept IPFIX logs from an F5 BigIP >> appliance? >> >> >> >> Sorry but why can you only send a pcap to vendor with a support contract >> to you? Is that a compliance reason from your company or something from F5 >> ? Just curious. >> >> >> >> On Tue, Nov 22, 2016 at 10:00 PM, Mcdonald, Scott < >> [email protected]> wrote: >> >> Hi Luca, >> >> The fact that it should work with ntopng gives me some hope. I’m only >> able to send a pcap to a vendor I have a commercial support agreement with >> so I will open a ticket with F5 Networks on this. Thanks for the response >> and I may reach out to the mailing list again if F5 is not helpful. >> >> >> >> >> >> *From:* [email protected] [mailto:ntop-bounces@listgatew >> ay.unipi.it] *On Behalf Of *Luca Deri >> *Sent:* Tuesday, November 22, 2016 3:26 PM >> *To:* [email protected] >> *Subject:* Re: [Ntop] Does ntopng accept IPFIX logs from an F5 BigIP >> appliance? >> >> >> >> Scott >> >> if the flows are compliant with the specification and contain all fields >> like, time, IP, protocol bytes etc it will work. If this is not the case I >> need to see a pcap with flows+template as there’s something to fix. You can >> send me the pcap privately if you want/can >> >> >> >> Regards Luca >> >> >> >> On 22 Nov 2016, at 15:40, Mcdonald, Scott <[email protected]> >> wrote: >> >> >> >> I’m trying to send IPFIX logs to ntopng/nprobe from my BigIP load >> balancer as described in this article: https://support.f5.c >> om/kb/en-us/products/big-ip-afm/manuals/product/network-fire >> wall-policies-implementations-11-5-0/8.html >> <https://urldefense.proofpoint.com/v2/url?u=https-3A__support.f5.com_kb_en-2Dus_products_big-2Dip-2Dafm_manuals_product_network-2Dfirewall-2Dpolicies-2Dimplementations-2D11-2D5-2D0_8.html&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=j-nRHdU_DiGtsbI3aYxM6NJln7Y_aGRgACxhKoQtKZM&e=>. >> I believe I have followed the steps correctly but ntopng does not appear to >> be picking up any events. Before reaching out to F5 support I just wanted >> to check with this list to see if what I am attempting is even possible >> with ntopng/nprobe. Thanks. >> >> ********************************************************************** >> >> This email and any files transmitted with it are confidential and >> intended solely for the use of the individual or entity to whom they are >> addressed. If you have received this email in error please notify the >> system manager at postmaster at dor.state.ma.us. >> >> ********************************************************************** >> >> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> <https://urldefense.proofpoint.com/v2/url?u=http-3A__listgateway.unipi.it_mailman_listinfo_ntop&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=KPKdy9Z_C2rir4t3Aj45QERPr_4c8WfW-XK67zA0mDs&e=> >> >> >> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> <https://urldefense.proofpoint.com/v2/url?u=http-3A__listgateway.unipi.it_mailman_listinfo_ntop&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=ITfuExxP71ZbYYE9rVaro4yG1s3uiKdCQA787pTxRZs&s=GuLRt9V5eE2zjWBUicTPt78qTW1FUcvLXheQTYjloxU&e=> >> >> >> >> >> >> -- >> >> Enrico Kern >> >> Lead System Engineer >> >> >> >> glispa GmbH >> >> Sonnenburger Straße 73 >> >> 10437 Berlin, Germany >> >> >> >> tel: +49 30 5557130-17 >> >> fax: +49 30 5557130-50 >> >> skype: flyersa >> >> [email protected] >> >> www.glispa.com >> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.glispa.com&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=ITfuExxP71ZbYYE9rVaro4yG1s3uiKdCQA787pTxRZs&s=i_RT7erJOnAkFrl0W-BkV9aNbDKxn4eyVUPmjbTWhzc&e=> >> >> >> >> __________________________________________ >> >> Sitz Berlin, AG Charlottenburg HRB 114678B >> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> > > > > -- > > Enrico Kern > > Lead System Engineer > > glispa GmbH > Sonnenburger Straße 73 > 10437 Berlin, Germany > > tel: +49 30 5557130-17 > fax: +49 30 5557130-50 > skype: [email protected] > > __________________________________________ > Sitz Berlin, AG Charlottenburg HRB 114678B > > -- Enrico Kern Lead System Engineer glispa GmbH Sonnenburger Straße 73 10437 Berlin, Germany tel: +49 30 5557130-17 fax: +49 30 5557130-50 skype: [email protected] __________________________________________ Sitz Berlin, AG Charlottenburg HRB 114678B
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
