Hi, I'd like to extract statistical data regarding the number of events that have been processed by a MARS Local controller. My MARS has got a limit of 5000 events when extracting raw messages (which is about 20 minutes of events in my setup): how can I get data regarding a day, week, etc.? Will a "Top Destination Port" report provide me with the total number of events or do those numbers refer to sessions ? I ran both "Top Destination Ports" and "Top Destinations" over the same period of time expecting the overall totals to be the same, but they were not and now I feel confused. Can someone provide some insight? Thank You
I can get some data (1 day,2 days,1 week,1 month,1 year) from the SUMMARY page (on the top left hand side) although I'd like to understand whether the 1 day data regards the last 24 hrs. or if it refers to the previous calendar day? Thanks for your help!
absolutely, but you can't really report on it (for trending, management reports, etc), you have to manually capture it. The "one day" is updated throughout the day, at least a couple times an hour, so appears to be the last 24 hours as of the update time.
I have looked at utilizing this window for rough trending as well, and I have learned that the "month" option appears to actually be five weeks. Just something to keep in mind if you try and use these numbers for something.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...