Net Flow - Interface ID

Graylog Central (peer support)
1

Graylog 5.2.7

I have enabled Netflow (v5) on our SonicWALL TZ570 appliance. And I’m getting plenty of data back. But I’m not sure if I’m getting the interface ID/number.

For SonicWALL, interfaces are X0, X1, etc.

I see this in the output:

nf_snmp_input
1
nf_snmp_output
2

I’m hoping that the “1” above is X0, and 2 is X1. Looking at other data, I think this is the case. But I’m not 100% sure.

2

This appears to confirm what you have suggested

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.