https://forum.nxfilter.org/tech-support/2932-netflow-sorting-by-size-issue
Date: 2024-05-03 20:58:07
User: Botch5547
Netflow data is coming in great within nxfilter but i do notice that when i try to sort by size , largest at the top, its not sorting correctly.
If you review the picture below, i am on page 3 and the largest size is 191.8MB. Why is this not on page 1?
It doesn't seem to be sorted in any particular way that makes sense so it makes tracking top talkers quite difficult if there are 10+ pages to examine.
Is there anything that could be done to improve this?
User: support200
Yeah, it seems to have some problem. Will try to fix it soon.
User: support200
That's JSP page problem. Copy logging,netflow.jsp file in the attached zip file into /nxfilter/guipack/sandwatch directory.
Attached Files
logging,netflow.zip
(2.7 KB, 1 view)
User: Botch5547
Do I restart Nxfilter service?
User: Botch5547
Your fix has resolved the problem!
To be sure, this fix will be in the next release?
User: support200
There is another problem i found with NETFLOW.
Im not sure if this occurred before or after your file install but the search options do not show the previous day data. I only ever get the last hour.
So trying to go back later in the day is not possible and I cannot go back a previous day which is also not possible.
User: Botch5547
Did it work OK before you install the file then? I don't think it will affect anything except the sorting problem. Did you try with the old JSP file then?
User: support200
I have not tried the original JSP file.
So the "{issue" is the MAX fetch limit. When dealing with flow records and time you need to be able to go back several days at least. 10k fetch limit wont work with netflow data. If its a busy network you may only be able to search netflow with a few hours of data.
Unless there is optimizations that can be done?
User: Botch5547
We have 10000 fetch limiit as we are not sure if DataTables can handle bigger data. Fetching big data set could be a problem when you use a low spec hardware but even if your server is fast enough DataTables works on your browser. So, your PC plays takes the job. However, it's a lot different from several years ago and we may increase it I guess. In the attached file, you can fetch 100000 data. Try it.
Attached Files
logging,netflow.zip
(2.7 KB, 2 views)
User: support200
Where do i apply those files?
User: Botch5547
Ive added the new jsp and i see searchable entries are now up to the max value you stated.
Still when i go to Logging > Netflow > List it still defaults to 15 and gives the max entries there of 100. Is there a way to change this default value or at least have the drop down select the MAX value of 100k ?
User: support200
You can modify the JSP file by yourself. Find this and change it to whatever you like:
Code:
"lengthMenu": [[15, 50, 100], [15, 50, 100]],
User: Botch5547
That did the trick. Thanks so much for assisting here.