netflow lack of Original Source/Destination ?



  • Hello,
    we are using netflow to ELK and we have being make little progress bit by bit, but we are lacking a crucial information that is, we are only able to get source IP/port & destination IP/port.

    but it would be really nice, if we could get information that is in the page of Diagnostics / States . where it provides Source (Original source) -> destination (Original Destination) ,

    is there way we can get "internal IP" or map Wan and Lan data together to show the internal IP that initial the sent or receive the final packet.
    Excuse my English since it's not my native language and I hope I have made myself clear .
    Thanks


Log in to reply