1 Reply Latest reply on Jan 13, 2017 10:48 AM by foonly

    IPv6 netflow conversation doesn't show details?

    designerfx

      I'm looking at a netflow conversation between two machines I'm told don't have IPv6 enabled. Yet this is what I see in Orion (tons of N/A). Was this IPv6/HTTPS or was something else missed? I've never seen a conversation show up like this with zero port information.

       

      netflow.png

      In comparison, here's another conversation:

       

      netflow2.png

        • Re: IPv6 netflow conversation doesn't show details?
          foonly

          I think that NTA 4.2.1 will track IPv6 as a protocol for summary of protocols, but does not yet save anything else from actual flows of IPv6 conversations.

           

          For example, I cannot setup IPv6 Address Groups. I can't enter IPv6 addresses in any format in the Flow Navigator.

           

          So I think adding IPv6 to the protocol list (see Settings> All Settings> NTA Settings> Monitored Protocols) is a first step towards IPv6.

           

          I sure hope SW moves forward on IPv6 faster. It has been mandated for federal internet facing servers since 2012, and internally since 2014. Everyone is having trouble with it because so many vendors claim IPv6 compatibility if any part of their product can do IPv6 - not if all parts do. They key thing is that we need to monitor IPv6 to troubleshoot IPv6.

           

          =Foonly=