A new netflow sensor is recording data fine, but I'd like to consolidate Chat, Remote Control, Infrastructure, and NetBIOs into the group Other Protocols. Under the sensor's Settings > Channel Configuration I select NO for each of those groups, leaving Web, FTP, Mail and Other set to YES. When I do that though, all traffic -- including HTTP -- suddenly drops to almost nothing in the graph and in the raw data. when I set the options back to YES, the graph slowly rises back to a normal level.
Also, when I set those channels to Invisible, they still display in the chart and the graph.
Add comment