nagios network analyzer and DHCP

[rashid2014]

hello
please!in our entreprise network we use dhcp in oder to attribut ip adress to computer.
how can i configure my sources without everyday look the new address of each host?
is there a method to permit to NNA to have automatically the new address of each host when the ip address change??

[sreinhardt]

NNA does not specifically use the IP address for filtering. Simply having the machine, regardless of IP send to the correct port for it's source collector is enough to keep it on the same storage areas. The one potential issue, would be correlating which systems they are communicating with if the IP addresses of both host and destination are changing. There would be nothing that we could do to correct this, as that is simply the traffic that your machines see, and is technically correct.

[rashid2014]

please i don't understand! do you want to say when we use dhcp system each time i must change the ip of sources on NNA when it change on the physical sources ?

[sreinhardt]

Again, no you would not need to. Network analyzer only uses ports for filtering, so as long as they send to the same port as they did before, the same device will stay with the correct NNA source. HOWEVER, and this is a big one, all of the devices around and including the device that flows are collected from will possibly change IPs. So if you are looking to correlate the data between last week and this week, it will be difficult if not impossible to say what device was what between the two points in time.

[rashid2014]

hello sreindhart!
i verify what you explain and i constat that when my source changes ip address (the port remains unchanged) the NNA does not receive netflow... is there a solution to keep the communication beetwen NNA server and sources when ip addresses only change on the network please?
thanks!

[scottwilkerson]

Again, what you put in the source address during setup of the source doesn't affect Nagios Network Analyzer receiving items, however, is your firewall restricting access to just a specific IP?

[rashid2014]

hello
it is ok! NNA and the sources communicate even when the IP address of sources change but the port remains the same!
thanks very much!!!

[tmcdonald]

It looks like everything is working correctly? If so I would like to close this topic.

[rashid2014]

hello
yes everything look like!
thank you