Show Posts
1
General Discussion / Port mirror & Netflow
« on: June 12, 2017, 04:23:18 pm »
Hello,
I have a brand new basic install of OPNsense 17.1.4-amd64 as a Virtual Machine in an ESXi environment. Right now I just want to setup the device to see how it handles traffic analytics/netflow before I place it inline.
As of now I have LAN (em0) setup with management IP and I'm able to login remotely.
I also have WAN (em1) setup to receive all traffic from my LAN via Port Mirror on the connected switch. I do not have IP setup on WAN.
I have ran tcpdump -i em1 and can verify that it is receiving LAN traffic. However, I am unable to see anything in Reporting > Insights or Reporting > Netflow. I have tried setting the Netflow settings to listen on WAN interface, Capture Local, and set destination to 127.0.01:2056
Still no luck.
Any ideas?
Thanks for any help
I have a brand new basic install of OPNsense 17.1.4-amd64 as a Virtual Machine in an ESXi environment. Right now I just want to setup the device to see how it handles traffic analytics/netflow before I place it inline.
As of now I have LAN (em0) setup with management IP and I'm able to login remotely.
I also have WAN (em1) setup to receive all traffic from my LAN via Port Mirror on the connected switch. I do not have IP setup on WAN.
I have ran tcpdump -i em1 and can verify that it is receiving LAN traffic. However, I am unable to see anything in Reporting > Insights or Reporting > Netflow. I have tried setting the Netflow settings to listen on WAN interface, Capture Local, and set destination to 127.0.01:2056
Still no luck.
Any ideas?
Thanks for any help