02-28-2012 10:38 AM
source ip is showing as destination and destination as source...not sure what's the cause...anyone else seen it..
i was thinking my be asymetric routing or something but that should show as one sided flows ..not reverse..
if anyone has any insight into it, please share..TIA
Solved! Go to Solution.
02-28-2012 01:32 PM
yes i'm on 2010 with recent patches..
and it's not all the flows that are showing this way but most..some are showing correctly..i have no idea where to even look..i had a support case open but didn't really get anywhere..they made it sound like this was normal.
02-29-2012 06:39 AM
I seem to remember something simular to this.
Under Admin, go into Flow Sources, and edit your source.
Untick the box 'Enable Asymetric Flows'.
This may be unrelated, I'm going back a couple of years...
02-29-2012 04:28 PM
And let us know if you can tie it to any particular type of flow source too. We have all type of flow types that we can look at and compare. It's obviously not related to release and patch level.
03-02-2012 09:14 AM
"Enable asymetric flows" is unchecked for all sources except jflow. i unchecked it for jflow as well and will watch it
it looks like syslog and dns flows are showing up in reverse