cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
325
Views
0
Helpful
1
Replies
Highlighted
Beginner

Stealthwatch flow search on unidirectional flows

Hello,

 

may I ask, I cannot find it. When I run ICMP request and I am not receiving any reply, I cant see these attempts on Flow search. When I perform ping to another direction and I receive reply, then I can see the flow. How can I see these connection Attempts or unidirectional flows?

 

Thank you

 

Bes regards

1 REPLY 1
Highlighted
Beginner

Hello,

You should be able to see them regardless of the search options. Two things I would recommend to check:
1) Are those ICMP request reaching any device which exports netflow?
2) Is the netflow template on those exporters configured to export data for the interfacs in inbound/outbound direction?
Could be that you only have configured it one way.

Kind regards,
Florian

Content for Community-Ad