I was trying to capture Netflow traffic from a device to my NMS server. I wanted to use the CFLOW decode as option under transport. I couldnt see transport window under decode as option. Is there a wayi Can enable this? All the protocols option is already checked. Regards, K.B.L asked 08 Dec '14, 13:16  KBL |
One Answer:
Sounds like there is something wrong with the captured frames. Did you capture the whole frame or just the first few bytes (60 bytes, or so)? Please check the size of the catured frame by looking at the Frame layer. Compare the values for "bytes on wire" and "bytes captured". If "bytes captured" is much lower than the value for "bytes on wire", then you might have missed the transport layer. BTW: Can you please share a small sample capture file (pcap - single frame is enough)? Please upload the file to google drive, dropbox or cloudshark.org and post the link here. Regards answered 08 Dec '14, 17:24  Kurt Knochner ♦ |
