Stealthwatch flow search on unidirectional flows

[hrdina129]

Hello,

may I ask, I cannot find it. When I run ICMP request and I am not receiving any reply, I cant see these attempts on Flow search. When I perform ping to another direction and I receive reply, then I can see the flow. How can I see these connection Attempts or unidirectional flows?

Thank you

Bes regards

[FloKo]

Hello,

You should be able to see them regardless of the search options. Two things I would recommend to check:
1) Are those ICMP request reaching any device which exports netflow?
2) Is the netflow template on those exporters configured to export data for the interfacs in inbound/outbound direction?
Could be that you only have configured it one way.

Kind regards,
Florian