We're started an sFlow monitor on our Firewall. So far it's working great. Right now we only see "WWW" traffice and "MAIL" traffic. Is there a way to split this up into POP3/IMAP/HTTP/HTTPS?

Article Comments

Attention: This article is a record of a conversation with the Paessler support team. The information in this conversation is not updated to preserve the historical record. As a result, some of the information or recommendations in this conversation might be out of date.

in the sensor settings in the Channel Configuration section select "Detail" for the WEB and MAIL.


Oct, 2011 - Permalink

It looks like there is just details for POP3 and SMTP. I assume this monitors port 110 and 25. We are using POP3S and SMTP3 (ports 995 and 465) Can we change that anywhere?


Oct, 2011 - Permalink

Hallo,

you could create your own custom sFlow sensors and add the channels yourself. Please take a look at

https://kb.paessler.com/en/topic/2143-can-i-add-custom-channels-to-standard-packet-sniffer-and-netflow-sensors


Oct, 2011 - Permalink