Mailing List Archive: Validating flow export timeout.

Validating flow export timeout.

Mar 29, 2017, 9:56 AM

Post #1 of 6 (753 views)

Hi

Is there a non trival way of knowing flow export time. The problem is that
I have confugured netflows on PaloAlto firewalls. Timeout is set for 60
seconds. Is by using e.g wireshark or some other tools can i see or
validate through some fields in protocol.

Thanks
regards
asad

Re: Validating flow export timeout. [ In reply to ]

faranda at ntop

Mar 30, 2017, 1:20 AM

Post #2 of 6 (751 views)

Permalink

Hi,

Can you try to rephrase your question please?

Regards,
Emanuele

On 03/29/2017 06:56 PM, asad wrote:
> Hi
>
> Is there a non trival way of knowing flow export time. The problem is
> that I have confugured netflows on PaloAlto firewalls. Timeout is set
> for 60 seconds. Is by using e.g wireshark or some other tools can i
> see or validate through some fields in protocol.
>
> Thanks
> regards
> asad
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

Re: Validating flow export timeout. [ In reply to ]

a.alii85 at gmail

Mar 30, 2017, 9:40 PM

Post #3 of 6 (750 views)

Permalink

Hi

What i mean is there a way to check netflows template export time. This is
time when the flow exporters flushes netflow records to flow collector. Can
it be checked thorough packet analysis?

Thanks
regards
Asad

On 30 Mar 2017 13:21, "Emanuele Faranda" <faranda@ntop.org> wrote:

> Hi,
>
> Can you try to rephrase your question please?
>
> Regards,
> Emanuele
>
> On 03/29/2017 06:56 PM, asad wrote:
>
> Hi
>
> Is there a non trival way of knowing flow export time. The problem is that
> I have confugured netflows on PaloAlto firewalls. Timeout is set for 60
> seconds. Is by using e.g wireshark or some other tools can i see or
> validate through some fields in protocol.
>
> Thanks
> regards
> asad
>
>
> _______________________________________________
> Ntop mailing listNtop@listgateway.unipi.ithttp://listgateway.unipi.it/mailman/listinfo/ntop
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

Re: Validating flow export timeout. [ In reply to ]

a.alii85 at gmail

Mar 30, 2017, 9:40 PM

Post #4 of 6 (750 views)

Permalink

Re: Validating flow export timeout. [ In reply to ]

mainardi at ntop

Mar 31, 2017, 12:50 AM

Post #5 of 6 (750 views)

Permalink

See netflow fields

FLOW_ACTIVE_TIMEOUT
Timeout value (in seconds) for active flow entries in the NetFlow cache

FLOW_INACTIVE_TIMEOUT
Timeout value (in seconds) for inactive flow entries in the NetFlow cache

Simone

On Fri, Mar 31, 2017 at 6:40 AM, asad <a.alii85@gmail.com> wrote:

> Hi
>
> What i mean is there a way to check netflows template export time. This is
> time when the flow exporters flushes netflow records to flow collector. Can
> it be checked thorough packet analysis?
>
> Thanks
> regards
> Asad
>
> On 30 Mar 2017 13:21, "Emanuele Faranda" <faranda@ntop.org> wrote:
>
>> Hi,
>>
>> Can you try to rephrase your question please?
>>
>> Regards,
>> Emanuele
>>
>> On 03/29/2017 06:56 PM, asad wrote:
>>
>> Hi
>>
>> Is there a non trival way of knowing flow export time. The problem is
>> that I have confugured netflows on PaloAlto firewalls. Timeout is set for
>> 60 seconds. Is by using e.g wireshark or some other tools can i see or
>> validate through some fields in protocol.
>>
>> Thanks
>> regards
>> asad
>>
>>
>> _______________________________________________
>> Ntop mailing listNtop@listgateway.unipi.ithttp://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>