Hello, we have started to use PRTG trying to find some solution to do a auto-blackhole when some of our IPs is receiving a DDoS.

So, we have created a Netflow sensor checking our router and we are monitoring protocols.

We have created a notification: If the UDP channel has +100Mbps, send notification by e-mail.

But, in this e-mail, we want see the destination IP. We have a toplist on we can see the affected IP. How to include the toplist in the e-mail?

Thanks.

Article Comments

Hello,

thank you very much for your feature request. I'm afraid currently this is just not possible. We will put this on the wish list though, and of course count your vote! Please bear with us.

best regards.


Sep, 2014 - Permalink

Hello, has there been any progress on this? We would also like to use the destination IP from the toplist. If not to email, can the destination IP be passed to a script or program?


Jun, 2015 - Permalink

Hello,

We are currently working on a feature which allows you to further process the Flow information. At this point we cannot tell you if it will be possible to extract the destination IP address to a notification or external script. Nevertheless, I will count your inquiry to our feature request list.

Best regards


Jun, 2015 - Permalink