Hi
ASA5520 with asa821-k8.bin is supported by Netflow v3.1
To close the look on ASA , NTA 3.5 does function with ASAs running 8.2+.
See
Debug log
2009-05-19 15:29:01,893 [STP SmartThreadPool Thread #56] WARN SolarWinds.Orion.NetFlow.Workflow.PacketProcessingWorkflow - Failed to parse packet from IP 10.80.80.199.2009-05-19 15:29:01,940 [STP SmartThreadPool Thread #56] WARN SolarWinds.Orion.NetFlow.V9PacketFactory - Packet was dropped because of invalid template id: 2632009-05-19 15:29:01,940 [STP SmartThreadPool Thread #56] WARN SolarWinds.Orion.NetFlow.Workflow.PacketProcessingWorkflow - Failed to parse packet from IP 10.80.80.199.2009-05-19 15:29:01,940 [STP SmartThreadPool Thread #54] WARN SolarWinds.Orion.NetFlow.V9PacketFactory - Packet was dropped because of invalid template id: 256
Hi,
if you want to netflow be able process data from Netflow-V9, than the template must contains following fields (according RFC).
(ID // RFC name)
1 // octetDeltaCount, 2 // packetDeltaCount, 4 // protocolIdentifier, 5 // ipClassOfService7 // sourceTransportPort8 // sourceIPv4Address10 // ingressInterface11 // destinationTransportPort12 // destinationIPv4Address14 // egressInterface
If one item is missing, than the template is invalid for our collector and we drop all packets which belongs to this template. So you need to set up router to export all these fields.
NTA 3.1 don't work with Cisco ASA
So you are not able to set up these fields for your templates or there is some other issue? If you know that you have all these fields in your templates and you are still not able collect data, can you please send me some short pcap from this device? I can check it. (I need template definition there)
Thanks, ET