This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Export Conversations

Hello, How can i export a conversations to wireshark to be analyze?

  • If you're quick enough you might be able to get the information from the NetFlow Database (assuming you have 4.1 and have installed the recommended separate database). Other than that, I don't think you can.

  • I don't think that will really work well.   Wireshark is looking at much lower level data than netflow, not to mention its looking at it continually - so you can tell how many milliseconds it was between this packet and that one.  Netflow summarizes the conversations by several criteria including source/dest ip/port among other things.   Then it sends it either when the conversation is complete, or when the timeouts for sending the data occur.   You would miss tons of info that Wireshark wants to have..

    I don't see this ever being an NTA feature myself...