Re: [Nfsen-discuss] Source and destination IP addresses / flows
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: Peter H. <ha...@sw...> - 2006-03-20 06:58:33
|
-----BEGIN PGP SIGNED MESSAGE-----
- --On March 16, 2006 10:22:28 -0500 Atif Abbasi <Ati...@la...> wrote:
| Hi,
|
| When I perform a search in the detail tab, looking for 1000 flows during
| a specific time frame.
| It lists all the source addresses and the destination
| address.....problem is all the destination addresses are the gateway
| address and the broadcast address.
nfdump only display, what your netflow exporter sends. So check for netflow
exporter for correct setup.
- Peter
|
| From my computer, I try to browse google.... So the source should be my
| computer's IP and destination should be google's ip.
| Please suggest.
|
| Thanks,
| atif
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland
E-mail: pet...@sw... Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
iQCVAwUBRB5Si/5AbZRALNr/AQHJrAQAoXGYpuLcNegse76/ll64lbKwqAUVl3wi
jED5FMFE3fC0BuxOKqXos6ew6Gv/b5Q7EfG/1HhBtSBnEbNCzl+OtONt/i5jfu3I
Jrr/bT8sv9bnT8hOkGKzx7FnoEcZDP2BySMvAfmb+JQvUfXtp5fyGJTTLN03pc6h
Teq7g7kYrSY=
=nNi4
-----END PGP SIGNATURE-----
|