I am showing conversations between 2 external IP's crossing my firewall (Cisco ASA) but 0 packets transmitted. These conversations show up at random times and between random external IP's but are always 93.8TB's. Below is a screen shot of one of the conversations. I would appreciate any insight that anyone might have as to what is happening here. Thank you.
@chad, thank you for your response. That makes sense on the packet counts so I will ignore that part. I don't necessarily have to export netflow information for the outside interface but the tutorial that I used setup the ACL as follows:
To accomplish what you are recommending I'm assuming that the Source would stay "any" and the destination would be changed to "Inside". Also, that service would remain "ip". Is that correct?
Funny, that was the same document that I referenced when I setup NetFlow on the ASA.
I currently only have one exporter setup for NetFlow and that is for the Inside interface. I always assumed that the interface setting on that page was just to specify which interface to use to communicate with the collector. I am using the Solarwinds Netflow Network Traffic Analyzer to capture the netflow data from the ASA. I have pasted the Solarwinds netflow settings below:
The weird thing about this traffic is that the time interval is way too short for the amount of data it is reporting.
