Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Export PRE/POST NAT in ClickHouse/Elastic and GUI #8384

Closed
lucaderi opened this issue May 9, 2024 · 1 comment
Closed

Export PRE/POST NAT in ClickHouse/Elastic and GUI #8384

lucaderi opened this issue May 9, 2024 · 1 comment
Assignees
Labels
Enhancement Ready to Test a feedback is needed on a proposal or implementation

Comments

@lucaderi
Copy link
Member

lucaderi commented May 9, 2024

As of today, ntopng allows users to choose what IP (PRE/POST) NAT are used in the GUI.

Today we keep one or the other and had to choose "Use Post-Nat Destination IPv4 Addresses and Ports" or "Use Post-Nat Source IPv4 Addresses and Ports" to replace those values in ntopng preferences even if nProbe is sending over all of:

 --- [225][Len 4] %POST_NAT_SRC_IPV4_ADDR     %postNatSourceIPv4Address   Post Nat Source IPv4 Address
 --- [226][Len 4] %POST_NAT_DST_IPV4_ADDR     %postNatDestinationIPv4Address      Post Nat Destination IPv4 Address
 --- [227][Len 2] %POST_NAPT_SRC_TRANSPORT_PORT %postNaptSourceTransportPort      Post Napt Source Transport Port
 --- [228][Len 2] %POST_NAPT_DST_TRANSPORT_PORT %postNaptDestinationTransportPort Post Napt Destination Transport Port .
Screenshot 2024-05-09 at 11 45 03

This ticket is to request to store both in ClickHouse and Elastic and perform searches on both PRE/POST fields

MatteoBiscosi added a commit that referenced this issue May 10, 2024
@MatteoBiscosi MatteoBiscosi added the Ready to Test a feedback is needed on a proposal or implementation label May 10, 2024
@MatteoBiscosi
Copy link
Member

Info correctly exported and represented
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement Ready to Test a feedback is needed on a proposal or implementation
Projects
None yet
Development

No branches or pull requests

2 participants