R80.30 Netflow Setup

[B_P]

Pre R80.10 Netflow worked fine.

Now on R80.30 I have two flows that are identical -- but one only shows Outbound and the other only shows Inbound BUT -- and this is perplexing -- it is the exact same traffic for both inbound and outbound flows -- i.e. source and destination are the same.

Yes.. let that simmer for a while.

I have one rule that's configured on the firewall and it's a rule that a lot of web traffic hits on.

I'm using ManageEngine's Netflow Analyzer.

For this traffic, I would expect there should be one flow and it should include both inbound and outbound traffic on the one interface (the internal interface it's hitting).

[B_P]

Since this issue has been ongoing for a year now, I have since upgraded to R80.40 (as I indicated on July 13) and am currently on JHF Take 67. It was not fixed when I upgraded to Take 48 (Take 38 included your VRRP accounting fix -- and also was confirmed not fixed by @Steve_Payne1) and it is not fixed now.

[Ilya_Yusupov]

@B_P ,

i'm checking with RnD and will update once we have conclusions.

Thanks,

Ilya 

[Steve_Payne1]

I'm currently on R80.30  jhf 200,  and will update to JHF 215 this weekend to see if it fixes the issue

[bvo]

Hi,

Please open a ticket with Support and send us the pcap file. Pls explain what you saw and expected ? Thanks very much.

[bvo]

Hi, 

Just want to follow up if an SR was opened with Support and pcap file uploaded ? Thanks.