is it right?

Hi All,

We have an defined appliaction, iPM, that monitors TCP/1433 on a subnet /24. when view " netflow node details" view, the application shows more traffic than the default TCP/1433. I thought the default TCP/1433 would shows all TCP/1433 traffic including the one that matches the defined application.

could anyone please confirmed if the default monitoring port includes or exclude the traffic that matches the defined application.

Regards,

Find more posts tagged with

Accepted answers

GZhytar

Hi tao_lao,

default monitoring port exclude traffic from custom applications. Right now any flow can belong only to one application and counted only once.

thanks

All comments

GZhytar

Hi tao_lao,

default monitoring port exclude traffic from custom applications. Right now any flow can belong only to one application and counted only once.

thanks

ecklerwr1

This is good 2 know G... thanks for the info :}

tao_lao

thanks Georgiy that helps alots

tao_lao

Humm, it is confusing. a few default monitoring ports exclude traffic from the custom applications. however there are a few still counting twice. I can see a conversion on both default monitoring port and custom application. Could someone explain please?

GZhytar

tao_lao,

please can you provide screen-shots with configuration of our custom applications and screen-shot of resource where you see traffic duplication

thanks