I setup a Linux box w/fprobe to provide netflow information about a network segment. I have checked to make sure that Fprobe is generating the netflow data I want. I would like to send this data to my MARS box. Should I setup a generic device in MARS with the ip address of the Linux box or do something else? Any tips would be appreciated. Thanks in advance.
If your device is not sending any syslog, then rather at first, you define the Netflow collector settings on MARS and see if it listens and maps the flow settings.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
