| Author |
Message |
Forum: Logalot Topic: how can I restore logalot on SuperLogics |
| tomp |
|
Posted: Fri Aug 20, 2010 1:35 pm
|
|
Replies: 1
Views: 19
|
| Are you looking to perform a fresh installation or restore? I am unfamiliar with superlogics machines. Are you taking full system backups or incremental backups? |
|
 |
Forum: Logalot Topic: logalot apache upgrade |
| tomp |
|
Posted: Fri Aug 20, 2010 1:33 pm
|
|
Replies: 3
Views: 153
|
Logalot only performs DNS lookups for the bulletin board, so out of the box all emails will contains the IP address if that is how the event was populated in Logalot. If the events come in as their resolved name Logalot will use that in the emails.
Let me talk to development about this. |
|
|
Forum: Scrutinizer Topic: ASA 5510 Interface Configuration |
| tomp |
|
Posted: Fri Aug 06, 2010 1:32 pm
|
|
Replies: 4
Views: 72
|
| I'm sorry, I was trying to use remember but remembered incorrectly. I was the one who reported this bug to Cisco. Release Notes can be found at: http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.html#wp337248 You will need to upgrade to at least 8.2.2. As you can see in the re... |
|
|
Forum: Scrutinizer Topic: ASA 5510 Interface Configuration |
| tomp |
|
Posted: Fri Aug 06, 2010 12:26 pm
|
|
Replies: 4
Views: 72
|
| What version of the ASA image are you running? There is a bug in 8.1 with the SNMP interface indexes not matching the interface in the NetFlow packets. I think both of your questions can be resolved by upgrading to ASA image 8.2 or 8.3 (8.3 requires a memory upgrade). Let me know what version you ar... |
|
|
Forum: Flow Analytics Topic: Problem with activation |
| tomp |
|
Posted: Mon Aug 02, 2010 7:13 pm
|
|
Replies: 1
Views: 34
|
Hey there,
forums.somix.com and forums.plixer.com are the same site. You were able to post, so I would appear that activation worked properly.
Somix is our former company name. Same company, same owners, different name.
Is there something else I can help you with?
- Tom |
|
|
Forum: Scrutinizer Topic: Top talker bandwidth not match current SPAN port monitoring |
| tomp |
|
Posted: Fri Jul 23, 2010 10:18 am
|
|
Replies: 6
Views: 68
|
| Hey there, 2 things: 1. The traffic is actually the same, just specified differently. In figure 1 below, it's show the traffic in Mega Bytes (MB) while figure 2 is showing the traffic in Gigabit (Gb). As there are 8 bits in a byte, if you divide 1.08Gb by 8bits, you arrive at 135000000 bytes, which ... |
|
|
Forum: Scrutinizer Topic: Top talker bandwidth not match current SPAN port monitoring |
| tomp |
|
Posted: Fri Jul 23, 2010 9:34 am
|
|
Replies: 6
Views: 68
|
Are you sure it's 1.09GB or not 1.09Gb?
You mention you're using a SPAN port, what are you exporting with? nProbe? Can you attached a screen shot?
- Tom |
|
|
Forum: Scrutinizer Topic: Devices appear twice |
| tomp |
|
Posted: Thu Jun 24, 2010 7:20 pm
|
|
Replies: 1
Views: 28
|
Are you exporting Flexible NetFlow and Traditional NetFlow at the same time, using different source interfaces?
Can you send me your flow configuration? tomp@plixer.com
I'll take a look.
- Tom |
|
|
Forum: Denika Topic: How are report titles generated? |
| tomp |
|
Posted: Wed Jun 16, 2010 10:51 am
|
|
Replies: 6
Views: 86
|
| Hey there! While visiting a customer just last week I discovered a bug with the same class maps used in different policy maps applied to different interfaces. There is an open bug ticket with our Development team concerning the matter, "Bug 2316 - cbQos - Needs to have Service Policy Name inclu... |
|
|
Forum: Scrutinizer Topic: NetFlow not displaying true destinations |
| tomp |
|
Posted: Tue Jun 08, 2010 7:43 pm
|
|
Replies: 9
Views: 121
|
| You should only need to span one port, the one with your PC running nProbe, set it to promiscuous mode and let it capture everything it sees. Depending on the switch, the flow exported to Scrutinizer can go out the same port, if not, you'll need another NIC on your nProbe PC attached to your network... |
|
|
Forum: Scrutinizer Topic: NetFlow not displaying true destinations |
| tomp |
|
Posted: Tue Jun 08, 2010 2:07 pm
|
|
Replies: 9
Views: 121
|
| In your case, you'll need something else if you want to determine the end user causing the traffic. You can run nProbe on a SPAN port attached to the same switch as the firewall. The SPAN port will see all of the traffic and nProbe will collect and export out to Scrutinizer. nProbe can run either on... |
|
|
Forum: Scrutinizer Topic: NetFlow not displaying true destinations |
| tomp |
|
Posted: Tue Jun 08, 2010 1:35 pm
|
|
Replies: 9
Views: 121
|
| It sounds like your router sits outside of a firewall or a proxy server. Your point of entry is probably the router, but where does the traffic go from there? Our network is similarly configured, so we use NetFlow capable switches to determine where the traffic is headed as well. There are other alt... |
|
|
Forum: Scrutinizer Topic: NetFlow not displaying true destinations |
| tomp |
|
Posted: Tue Jun 08, 2010 11:06 am
|
|
Replies: 9
Views: 121
|
What type of device you looking at the NetFlow on? Is it an ASA?
- Tom |
|
|
Forum: Scrutinizer Topic: Netflow scrutinizer with nexus 1000v |
| tomp |
|
Posted: Fri May 21, 2010 7:31 am
|
|
Replies: 4
Views: 127
|
| That is not normal. What version of Scrutinizer are you using? As for interface names, you should have SNMP enabled on the Nexus 1000 with the IP of your Scrutinizer server listed allowing SNMP requests. As long as Scrutinizer can poll for the interface descriptions, it should pull them properly. Fe... |
|
|
Forum: Denika Topic: Denika7.0 + What'UP Gold Premium12.4 |
| tomp |
|
Posted: Wed Mar 31, 2010 7:05 am
|
|
Replies: 5
Views: 259
|
Can you email me a screen shot of your WhatsUp integration configuration? Please email to tomp@plixer.com.
I'll take a look and help you.
- Tom |
|
|
| Sort by: |
