OPNsense Forum

English Forums => General Discussion => Topic started by: thereaper on July 08, 2018, 01:48:48 pm

Title: Netflow and InSight configuration
Post by: thereaper on July 08, 2018, 01:48:48 pm

I tried to configure it, created
- Reporting/Netflow/:
  -- Interfaces - WAN
  -- Egress Only - WAN
  -- Capture Local - false (default)
In Reporting/Insight - No Data available.
Amended:
- Reporting/Netflow/:
  -- Interfaces - WAN, LAN
  -- Egress Only - WAN
  -- Capture Local - true
In Reporting/Insight - some graphs and pie charts appeared.

Now I thought, I'm only interested in WAN traffic, changed  "Interfaces - WAN, LAN" to  "Interfaces - WAN", pressed apply, router just died on me - no GUI response, not serving traffic. Rebooted - seems OK. Not sure is it a bug or just me.

Thanks a ton, and its best project ever :)

Title: Re: Netflow and InSight configuration
Post by: thereaper on July 08, 2018, 02:17:37 pm

Also, in Netflow Export & Analyses (https://docs.opnsense.org/manual/netflow.html), definitions of Ingress and Egress are bit confusing:
Ingress - Traffic to or coming from the firewall.
Egress - Traffic passing trough the firewall.

And here (https://docs.opnsense.org/manual/how-tos/insight.html) what is Stacked, Stream, Expanded?

Title: Re: Netflow and InSight configuration
Post by: biosinside on July 18, 2018, 04:08:08 am

Hi thereaper,

i'm newbie to Netflow, and also felt so confused about the definitions of ingress and egress in this field. After struggling to figure them out on google, i realized that same terms in different fields may have different meanings. Here is my understanding about ingress and egress in regard to Netflow for your reference, and please correct me if there is anything wrong.

Ingress: the packets which are (1) initiated by the firewall itself, or (2) destined to the firewall itself
Egress: the traffic coming from one interface of the firewall and going out via another interface

Hope my post helps.

Best Regard.

Title: Re: Netflow and InSight configuration
Post by: franco on July 19, 2018, 12:24:48 am

Hi there,

Egress means WAN and the other one LAN. We've clarified the labels in this way for 18.7.


Cheers,
Franco

Title: Re: Netflow and InSight configuration
Post by: thereaper on July 31, 2018, 02:38:29 pm

Quote from: franco on July 19, 2018, 12:24:48 am

We've clarified the labels in this way for 18.7

Hi franco. Could you point to new docs regarding the Netflow config ?

Title: Re: Netflow and InSight configuration
Post by: franco on July 31, 2018, 03:11:07 pm

The GUI labels on the NetFlow page were updated for clarity, not the documentation.


Cheers,
Franco

Title: Re: Netflow and InSight configuration
Post by: pete on September 01, 2018, 08:50:22 pm

Hi all

I've just upgraded from 18.1 to 18.7 today and imported the old config.
I did a clean install.

Unfortunalty I'm not able to select a interface from the NetFlow GUI anymore. When I want to select something from any dropdown on this page I get "Nothing to select". With 18.1 it worked without problems.

I've googled and searched the forum but did not find any solution.

Any ideas?

Thanks.

Title: Re: Netflow and InSight configuration
Post by: franco on September 03, 2018, 03:59:30 pm

Please clear your browser cache or use a different browser.


Cheers,
Franco

Title: Re: Netflow and InSight configuration
Post by: pete on September 03, 2018, 10:33:00 pm

Thanks Franco

clearing the browser cache worked fine. Soo simple.

Thx.