There is no information for Host and Conversation for Flow IPv6

Products

• CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

On wireshark we can see:

SrcAddr: ::

DstAddr: ::

ipv6FlowLabel: 0

IPv6 Extension Headers: 0x00000000

And the NFA report show:

Host Summary - Volume (::)

Using the same device flow configuration in NFA 9.3.6 (build122) we can see the the report and IP's in Host Summary

Now in NFA 10.0.1 (build41) we cannot see the IP's in Host Summary, show only (::)

Cause

With 9.5.0 we have added support for IPv6. So if the traffic contains only IPv4 we will show IPv4 and if it contains IPv6 we will show IPv6.

But if we have both IPv4 and IPv6, then IPv6 will take the precedence which is the case here.

Environment

Release : 10.0

Resolution

Behaviour in versions prior to 9.5.0:

NetFlow Packet Contents Graphs

Only IPv4 show IPv4

Only IPv6 show No Data

Both IPv4 and IPv6 show only IPv4

Behaviour in versions after 9.5.0:

NetFlow Packet Contents Graphs

Only IPv4 show IPv4

Only IPv6 show IPv6

Both IPv4 and IPv6 show IPv6 that has the preference

Due to this, you will see only :: in version after 9.5.0 because the IPv6 address is configured as :: in the router.