A new netflow sensor is recording data fine, but I'd like to consolidate Chat, Remote Control, Infrastructure, and NetBIOs into the group Other Protocols. Under the sensor's Settings > Channel Configuration I select NO for each of those groups, leaving Web, FTP, Mail and Other set to YES. When I do that though, all traffic -- including HTTP -- suddenly drops to almost nothing in the graph and in the raw data. when I set the options back to YES, the graph slowly rises back to a normal level.

Also, when I set those channels to Invisible, they still display in the chart and the graph.


Article Comments

Hello,

once a channel exists, it won't be deleted if you switch from the detailed to the "non detailed" sensor results in the Netflow Sensor. So while they still exist, the detail-channels should then show 0 results if you disable the detail results.

best regards.


Jun, 2011 - Permalink