Hi,

I have created a new, user-defined Netflow sensor in the PRTG. In the sensor I have defined the following Channels:

#3001:Various
(Protocol[UDP]) OR (Protocol[TCP])

#1001:VIS
Protocol[TCP] and (SourcePort[4443] or DestinationPort[4443])

#1002:Port
Port[4443]

Unfortunately, no Chanel "TEST", or "TEST1" is generated. In the top connections, however, I see some connections with the target port 4443. What am I doing wrong?

Article Comments

Attention: This article is a record of a conversation with the Paessler support team. The information in this conversation is not updated to preserve the historical record. As a result, some of the information or recommendations in this conversation might be out of date.

Hello Marco,
we appreciate your contact.

Please refer to:

The rules are processed top to bottom (the number does not matter) and the data is accounted to the first match.

The "problem" of your definition is that you're starting with a very generic rule (All TCP and All UDP), this way all data falls into the first channel. You should start with more specific filters and at the end more generic rules. For example:

#1001:VIS
Protocol[TCP] and Port[4443]

#1002:Port
Protocol[UDP] and Port[4443]

#3001:Various
(Protocol[UDP]) OR (Protocol[TCP])

Best Regards,
Luciano Lingnau [Paessler Support]


Oct, 2017 - Permalink