Hi,
I would like to request NTA support for the Cisco 3k series device latest flow enhancement. With the latest enhancement it is possible to export NBAR based flow data from the f.ex 3650/3850 devices.
NTA should support following flow fields:
match ipv4 version
match ipv4 protocol
match application name
match connection client ipv4 address
match connection server ipv4 address
match connection server transport port
match flow observation point
collect flow direction
collect connection initiator
collect connection client counter packets long
collect connection client counter bytes network long
collect connection server counter packets long
collect connection server counter bytes network long
collect timestamp absolute first
collect timestamp absolute last
collect connection new-connections