Nagios Support Forum

Will do that, thanks. I guess we're done here for now.

I've made some progress. This documentation was key to understanding what had to be done: "The significant events that are tracked include flow-create, flow-teardown, flow-denied (excluding those flows that are denied by EtherType ACLs), and flow-update. The ASA implementation of NSEL generates...

I did install nProbe on my home desktop and sent the data back to my office's NNA where I've been working at, and it worked perfectly, just as I thought it would. Very accurate and much more detailed than ASA's crappy netflow :x Running 'nfdump -r' on the files fed by nProbe also kinda confirms my s...

For me, it still shows twice the real value. These are from yesterday: download1.png And there's this one I've just tried: download2.png It should be 648MB, but show up as nearly two times that number. Everything else is still messed up. But from you screen shot, I can tell it's something I'm doing ...

I did a couple more tests, and the results were the same. You said you ran a report, but reports don't show the total bytes the same way as queries, do they? Another thing I've noticed is that, when the download is split between 2 nfcap files, it shows a slightly smaller total bytes at first, then i...

Just as a "fun" sidenote: "NetFlow data from Cisco Adaptive Security Appliance (ASA) is not supported in this release (3.0) of Prime Infrastructure." http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-0/release/notes/cpi_rn.html Not even Cisco gets along well wi...

I've noticed quite a few more issues with my tests. I did the following download: [user@server tmp]$ wget http://fisica.ufpr.br/kurumin/kurumin-7.0.iso --2016-09-28 15:37:53-- http://fisica.ufpr.br/kurumin/kurumin-7.0.iso Resolving fisica.ufpr.br (fisica.ufpr.br)... 200.238.171.246, 2801:82:80ff:7fc...

refer to our doc on ASA netflow configuration and compare it to the doc you followed. The only difference I noticed was "logging flow-export-syslogs disable" not present. But on the GUI, the "Disable redundant syslog messages" is checked. When you do a 'sh config' right now, do ...

I think so. I'll report back if I get an answer from them.

1) In ASDM, choose Tools > Command Line Interface. - In the Command field, enter the show flow-export counters Result of the command: "show flow-export counters" destination: DMZ_MPLS-NET 1.1.1.1 9991 Statistics: packets sent 107653 Errors: block allocation failure 0 invalid interface 0 t...