15 Replies Latest reply on Nov 10, 2009 9:04 AM by Andy McBride

    ASA5520

      Hi

      ASA5520 with asa821-k8.bin is supported by Netflow v3.1

        • Re: ASA5520

          Debug log

          2009-05-19 15:29:01,893 [STP SmartThreadPool Thread #56] WARN  SolarWinds.Orion.NetFlow.Workflow.PacketProcessingWorkflow - Failed to parse packet from IP 10.80.80.199.
          2009-05-19 15:29:01,940 [STP SmartThreadPool Thread #56] WARN  SolarWinds.Orion.NetFlow.V9PacketFactory - Packet was dropped because of invalid template id: 263
          2009-05-19 15:29:01,940 [STP SmartThreadPool Thread #56] WARN  SolarWinds.Orion.NetFlow.Workflow.PacketProcessingWorkflow - Failed to parse packet from IP 10.80.80.199.
          2009-05-19 15:29:01,940 [STP SmartThreadPool Thread #54] WARN  SolarWinds.Orion.NetFlow.V9PacketFactory - Packet was dropped because of invalid template id: 256

            • Re: ASA5520
              ET

              Hi,

              if you want to netflow be able process data from Netflow-V9, than the template must contains following fields (according RFC).

              (ID // RFC name)

              1   // octetDeltaCount,    
              2   // packetDeltaCount,   
              4   // protocolIdentifier, 
              5   // ipClassOfService
              7   // sourceTransportPort
              8   // sourceIPv4Address
              10 // ingressInterface
              11 // destinationTransportPort
              12 // destinationIPv4Address
              14 // egressInterface

               

              If one item is missing, than the template is invalid for our collector and we drop all packets which belongs to this template. So you need to set up router to export all these fields.