I've successfully set up a core server on one machine and a remote probe on other machine with a QOS sensor running on port 50000. I am able to watch the 'live data' graph being updated every minute with different values.

However, when I start up wireshark on the remote probe machine and watch for the incoming traffic from the core server, I'm not seeing any traffic taking place??

I even used netcat to send an UDP packet on port 50000 to verify that wireshark could see this traffic and it did. However, it's not seeing any traffic from the core server beyond the 3-way TCP handshake.

How can I see the traffic for the QOS sensor?

Article Comments

I upgraded to 8.2 and am not seeing any traffic between core server and the remote proble that is being initiated and analyzed by the QOS sensor.


Jan, 2011 - Permalink

I figured it out:

I need to add QOS sensor to the local probe on the core server, not to the remote probe. I am now seeing the traffic from core server to the remote probe.


Jan, 2011 - Permalink