We use netflow with success to monitor activities. I can define a protocol name based on IP or/and port used. We use also API to export information to powerbi We export top talkers & top protocol.
But I cannot associate the 2, never in top protocol I have an info saying this transaction is of type protocol A
an example
-------------------
the filter created for top protocol in netflow
#1001:HTTP_1 Protocol[TCP] and ( SourcePort[80] or DestinationPort[80]) and ip[10.11.12.13] #1002:HTTP_2 Protocol[TCP] and ( SourcePort[81] or DestinationPort[81]) and ip[10.11.12.13] #1002:HTTP Protocol[TCP] and ( SourcePort[80] or DestinationPort[80])
Now in my top connections , I would like to retrieve the associate protocol directly or via an API (I names my column my wish)
Source IP | Destination IP | SourcePort | MY WISH |
MyPc | 10.11.12.13 | 80 | HTTP_1 |
MyPc | 10.11.12.13 | 81 | HTTP_2 |
MyPC | 20.21.22.23 | 80 | HTTP |
I hope someone can help me
Add comment