Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - synthetiq

#1
General Discussion / Port mirror & Netflow
June 12, 2017, 04:23:18 PM
Hello,

I have a brand new basic install of OPNsense 17.1.4-amd64 as a Virtual Machine in an ESXi environment.  Right now I just want to setup the device to see how it handles traffic analytics/netflow before I place it inline.

As of now I have LAN (em0) setup with management IP and I'm able to login remotely.

I also have WAN (em1) setup to receive all traffic from my LAN via Port Mirror on the connected switch.  I do not have IP setup on WAN.

I have ran tcpdump -i em1 and can verify that it is receiving LAN traffic.  However, I am unable to see anything in Reporting > Insights or Reporting > Netflow.  I have tried setting the Netflow settings to listen on WAN interface, Capture Local, and set destination to 127.0.01:2056

Still no luck.

Any ideas?

Thanks for any help