I work for a government entity and that is the policy here. Thanks.
From: ntop-bounces@listgateway.unipi.it [mailto:ntop-bounces@listgateway.unipi.it] On Behalf Of Enrico Kern
Sent: Tuesday, November 22, 2016 4:04 PM
To: ntop@unipi.it
Subject: Re: [Ntop] Does ntopng accept IPFIX logs from an F5 BigIP appliance?
Sorry but why can you only send a pcap to vendor with a support contract to you? Is that a compliance reason from your company or something from F5 ? Just curious.
On Tue, Nov 22, 2016 at 10:00 PM, Mcdonald, Scott <mcdonalds@dor.state.ma.us<mailto:mcdonalds@dor.state.ma.us>> wrote:
Hi Luca,
The fact that it should work with ntopng gives me some hope. I’m only able to send a pcap to a vendor I have a commercial support agreement with so I will open a ticket with F5 Networks on this. Thanks for the response and I may reach out to the mailing list again if F5 is not helpful.
From: ntop-bounces@listgateway.unipi.it<mailto:ntop-bounces@listgateway.unipi.it> [mailto:ntop-bounces@listgateway.unipi.it<mailto:ntop-bounces@listgateway.unipi.it>] On Behalf Of Luca Deri
Sent: Tuesday, November 22, 2016 3:26 PM
To: ntop@unipi.it<mailto:ntop@unipi.it>
Subject: Re: [Ntop] Does ntopng accept IPFIX logs from an F5 BigIP appliance?
Scott
if the flows are compliant with the specification and contain all fields like, time, IP, protocol bytes etc it will work. If this is not the case I need to see a pcap with flows+template as there’s something to fix. You can send me the pcap privately if you want/can
Regards Luca
On 22 Nov 2016, at 15:40, Mcdonald, Scott <mcdonalds@dor.state.ma.us<mailto:mcdonalds@dor.state.ma.us>> wrote:
I’m trying to send IPFIX logs to ntopng/nprobe from my BigIP load balancer as described in this article:
https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-11-5-0/8.html<
https://urldefense.proofpoint.com/v2/url?u=https-3A__support.f5.com_kb_en-2Dus_products_big-2Dip-2Dafm_manuals_product_network-2Dfirewall-2Dpolicies-2Dimplementations-2D11-2D5-2D0_8.html&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=j-nRHdU_DiGtsbI3aYxM6NJln7Y_aGRgACxhKoQtKZM&e=>. I believe I have followed the steps correctly but ntopng does not appear to be picking up any events. Before reaching out to F5 support I just wanted to check with this list to see if what I am attempting is even possible with ntopng/nprobe. Thanks.
**********************************************************************
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager at postmaster at dor.state.ma.us<
http://dor.state.ma.us/>.
**********************************************************************
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it<mailto:Ntop@listgateway.unipi.it>
http://listgateway.unipi.it/mailman/listinfo/ntop<
https://urldefense.proofpoint.com/v2/url?u=http-3A__listgateway.unipi.it_mailman_listinfo_ntop&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=34ejaNmDRjm9p_lo3XriDNZqUZFXkxMuUF4td0GXSNk&s=KPKdy9Z_C2rir4t3Aj45QERPr_4c8WfW-XK67zA0mDs&e=>
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it<mailto:Ntop@listgateway.unipi.it>
http://listgateway.unipi.it/mailman/listinfo/ntop<
https://urldefense.proofpoint.com/v2/url?u=http-3A__listgateway.unipi.it_mailman_listinfo_ntop&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=ITfuExxP71ZbYYE9rVaro4yG1s3uiKdCQA787pTxRZs&s=GuLRt9V5eE2zjWBUicTPt78qTW1FUcvLXheQTYjloxU&e=>
--
Enrico Kern
Lead System Engineer
glispa GmbH
Sonnenburger Straße 73
10437 Berlin, Germany
tel: +49 30 5557130-17
fax: +49 30 5557130-50
skype: flyersa
enrico.kern@glispamedia.com<mailto:enrico.kern@glispamedia.com>
www.glispa.com<
https://urldefense.proofpoint.com/v2/url?u=http-3A__www.glispa.com&d=DgMFaQ&c=Xhn9KFvv0VrhnMFbYtQjTGdTU13Xl3cIMh34YNGAA48&r=vyGRwrvRh69NOl4g8vTPTOIW6t_m8jLZIhmZFGH1NB4&m=ITfuExxP71ZbYYE9rVaro4yG1s3uiKdCQA787pTxRZs&s=i_RT7erJOnAkFrl0W-BkV9aNbDKxn4eyVUPmjbTWhzc&e=>
__________________________________________
Sitz Berlin, AG Charlottenburg HRB 114678B