Page 1 of 1
Data is not Ri8
Posted: Fri Jul 28, 2017 2:18 am
by abhi321jay
In this page you can see total data transmitted from destination IP 600+ GB which is not true. can you please explain
Re: Data is not Ri8
Posted: Fri Jul 28, 2017 1:58 pm
by tgriep
Can you run that query on the NNA server and then click on the Bytes header to sort the query by Bytes with the largest Bytes on top?
Screen capture that and post it here.
Your query is 42 pages long and there could be larger transfers of data that is not displaying.
Also, there is a known bug in the NNA GUI. The Bytes/Sec label is actually supposed to be Bits/Sec.
Re: Data is not Ri8
Posted: Thu Aug 03, 2017 11:03 pm
by abhi321jay
Is there anyway to sort this out bczz the data is given by NNA is very high which is not possible.
Re: Data is not Ri8
Posted: Fri Aug 04, 2017 11:40 am
by tgriep
Can you login to the NNA server as root, run the following command and post the /tmp/dump.csv file?
Code: Select all
nfdump -R /usr/local/nagiosna/var/FortinetFirewall/flows -A dstip,srcip 'dst ip 10.80.0.248' -O bytes -o csv >/tmp/dump.csv
Make sure the path is correct in the above command.
I have heard of some compatibility issues with Fortinet firewalls so make sure the system is up to date with the latest firmware.
What is the Make and Model number of the device and can you post the configuration settings so I can view them?
Re: Data is not Ri8
Posted: Wed Aug 09, 2017 2:24 am
by abhi321jay
Hii,
please find the required file and provide solution as we are not able to get exact data
Re: Data is not Ri8
Posted: Wed Aug 09, 2017 4:21 pm
by tgriep
In the bottom of the dump file, it has the summary of the traffic flow for that FortinetFirewall, does it look correct?
Code: Select all
flows bytes packets avg_bps avg_pps avg_bpp
13763 364203262514 165769653 34722243 1975 2197
Re: Data is not Ri8
Posted: Wed Aug 09, 2017 4:29 pm
by tgriep
Another thing I found in the dump file is that the system is receiving the same value for the inbound bytes as the outbound bytes which is causing the numbers to be twice as large.
Verify that the Fortinet system is configured correctly and is not sending the incorrect information for the inbound vs the outbound data.
Re: Data is not Ri8
Posted: Wed Aug 16, 2017 11:17 pm
by abhi321jay
Can you share timline for that BUG (Bytes and bits confusion in GUI) FIXING
Re: Data is not Ri8
Posted: Thu Aug 17, 2017 9:21 am
by tgriep
All I can say is that the next version is coming soon.