Mailing List Archive

application name in nProbe's IPFIX record
Hi All,

I know that nDPI is by default a component of nProbe, but I wonder what fields in IPFIX record created by nProbe can include the Application name detected name?
I can only see %APPLICATION_NAME Palo Alto App-Id, but no more fields to enable in the probe template.

Thanks

Hossam
Re: application name in nProbe's IPFIX record [ In reply to ]
Hossam,

See fields:

[NFv9 57590][IPFIX 35632.118] %L7_PROTO Layer 7 protocol (numeric)
[NFv9 57591][IPFIX 35632.119] %L7_PROTO_NAME Layer 7 protocol name

Simone

> On 26 Oct 2017, at 15:27, Hossam Zalabany <h.zalabany@interviewns.de> wrote:
>
> Hi All,
>
> I know that nDPI is by default a component of nProbe, but I wonder what fields in IPFIX record created by nProbe can include the Application name detected name?
> I can only see %APPLICATION_NAME Palo Alto App-Id, but no more fields to enable in the probe template.
>
> Thanks
>
> Hossam
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop