Fix for Cisco ASA showing 0.0.0.0.0.0 for source and Destination for build 9900
Thank you for your time during the call. Please follow the below steps and check on the issue:
1) Stop the NetFlow Analyzer Service.
2) Open Command prompt as administrator and navigate to NetFlow_Home/bin and execute startDB.bat two times for windows server and startDB.sh three times for Linux server.
3) Then navigate to NetFlow_Home/pgsql/bin if using Postgress Database and execute the below command:
For Windows : psql -U postgres -p 13310 -h 127.0.0.1 -d netflow
For Linux : ./psql -U postgres -p 13310 -S ../tmp/ -h 127.0.0.1 -d netflow
If using Mysql Database :
For Windows : mysql -u root -P 13310
For Linux : ./mysql -u root -P 13310 -S ../tmp/mysql.sock
4) Type use netflow
5) Execute the following query :
update NetFlow_Router set FLOW_TYPE=0;
6) Type quit to quit mysql and \q to quit postgress.
7) Navigate to NetFlow_Home/bin and execute stopDB.bat 2 time and check on the issue.
8) Type exit to exit command prompt
9) Navigate to NetFlow_Home/bin and edit run.sh/run.bat by adding the following property at the end of JAVA_OPT
-DsetASAIPV4Only=true
10) Edit wrapper.conf under NetFlow_Home/conf by adding the additional property
wrapper.java.additional.<count+1>=-DsetASAIPV4Only=true
11) Download and unzip the file from the link below. open the file, you will find NFFieldCatalog.xml replace it under NetFlow_home/conf/netflow/ folder.
http://uploads.zohocorp.com/Internal_Useruploads/dnd/NetFlow_Analyzer/p18sbi5polufd1siv1e2f1pvfe530/Fix.zip
12) To behave all the ASA as IPV4 (dual template issue) add the following property in System_properties.conf present under NetFlow/conf/
setASAIPV4Only=true
13) Start NetFlow Analyzer service and check on the issue.
1) Stop the NetFlow Analyzer Service.
2) Open Command prompt as administrator and navigate to NetFlow_Home/bin and execute startDB.bat two times for windows server and startDB.sh three times for Linux server.
3) Then navigate to NetFlow_Home/pgsql/bin if using Postgress Database and execute the below command:
For Windows : psql -U postgres -p 13310 -h 127.0.0.1 -d netflow
For Linux : ./psql -U postgres -p 13310 -S ../tmp/ -h 127.0.0.1 -d netflow
If using Mysql Database :
For Windows : mysql -u root -P 13310
For Linux : ./mysql -u root -P 13310 -S ../tmp/mysql.sock
4) Type use netflow
5) Execute the following query :
update NetFlow_Router set FLOW_TYPE=0;
6) Type quit to quit mysql and \q to quit postgress.
7) Navigate to NetFlow_Home/bin and execute stopDB.bat 2 time and check on the issue.
8) Type exit to exit command prompt
9) Navigate to NetFlow_Home/bin and edit run.sh/run.bat by adding the following property at the end of JAVA_OPT
-DsetASAIPV4Only=true
10) Edit wrapper.conf under NetFlow_Home/conf by adding the additional property
wrapper.java.additional.<count+1>=-DsetASAIPV4Only=true
11) Download and unzip the file from the link below. open the file, you will find NFFieldCatalog.xml replace it under NetFlow_home/conf/netflow/ folder.
http://uploads.zohocorp.com/Internal_Useruploads/dnd/NetFlow_Analyzer/p18sbi5polufd1siv1e2f1pvfe530/Fix.zip
12) To behave all the ASA as IPV4 (dual template issue) add the following property in System_properties.conf present under NetFlow/conf/
setASAIPV4Only=true
13) Start NetFlow Analyzer service and check on the issue.
New to ADSelfService Plus?
Related Articles
Consolidated fix for NetFlow Analyzer Build 10250 for Stand Alone
Note: This can be done with NetFlow Analyzer build 10250 only. Take the backup of the files before replacing. For Distributed Edition, make sure to follow the steps in Central and Collector servers. The consolidated fix is available over 10250 which ...MSSQL- Last hour report showing unaccounted for Application, source and destination.
Steps for version 12: Regarding the issue last hour report showing unaccounted, Please make sure you have done following steps: 1. Stop the OpManager service. 2. From the installed MSSQL SERVER, copy the files bcp.exe and bcp.rll to ...Consolidated Fix for Build 11001
Note: This can be done with NetFlow Analyzer build 11001 only. Take the backup of the files before replacing. For Distributed Edition, make sure to follow the steps in Central and Collector servers. Download the Fix from the below link, it contains ...Used Rules Not Shown for Cisco ASA (FWA)
For every transaction happening in Cisco Firewall, an rule configured in it matches. This matched policy along with complete transaction detail is audited through Message-ID 106100. Please follow the below link which provides more information about ...Consolidated FIX for NFAPlugin-10250
Note: This can be done with NetFlow Analyzer build 10250 only. Take the backup of the files before replacing. The consolidated fix is available over 10250 which includes : 1) Alert Profile query optimization 2) Custom DashBoard Report 3) Application ...