Hi experts and friends,
My topology running is like this
Router ASR1001---------Fw Checkpoint-------Solarwind Server
I configure netflow on Router ASR like this: (for it to push netflow traffic to Solarwind Server)
flow record FLOW-RECORD-1
match ipv4 destination address
match ipv4 source address
match ipv4 protocol
.....(omit)
!
flow exporter EXPORTER-1
destination "IP of solarwind"
source GigabitEthernet0
transport udp 9996
!
flow monitor FLOW-MONITOR-1
exporter EXPORTER-1
cache timeout inactive 10
cache timeout active 60
record FLOW-RECORD-1
...apply to interface...
But on my Checkpoint firewall, it drop traffic from router to solarwind, and it said that Invalid UDP packet - source / destination port 0. Dropped although the protection is disabled
This is packet I capture on my Cisco router
I want to know Why cisco sends packet which has source port is 0, which is a security issue for many firewalls
Thank you!!
