Netflow data from ASA. first packet and last packet.

[Oleg Volkov]

Hello

I try to collect NetFlow data from ASA.

I make SSH seeion from 192.168.55.165 to 194.186.100.10 and see record

1569929614000000000 192.168.55.1:48502 2019-10-01 14:33:34 +0300 MSK 194.186.100.10 22 tcp 192.168.55.165 7771 with NO rx and TX bytes

After disconnection I see:

1569929653000000000 192.168.55.1:48502 2019-10-01 14:34:12 +0300 MSK 7051 4397 194.186.100.10 22 tcp 192.168.55.165 7771

Where 7051 RX bytes and 4397 TX bytes

If my session not closed, Can I see RX/TX bytes or it can after close session only?

Thank You!

> SELECT * FROM FlowData WHERE dstip='194.186.100.10'
name: FlowData
time DeviceIP Flowtime RXButes TXButes dstip dstport protocol srcip srcport
---- -------- -------- ------- ------- ----- ------- -------- ----- -------
1569929614000000000 192.168.55.1:48502 2019-10-01 14:33:34 +0300 MSK 194.186.100.10 22 tcp 192.168.55.165 7771
1569929653000000000 192.168.55.1:48502 2019-10-01 14:34:12 +0300 MSK 7051 4397 194.186.100.10 22 tcp 192.168.55.165 7771
>