Configure the Correct Capture Interfaces on a Secure Analytics Flow Sensor 4240 Appliance

Available Languages

Download Options

PDF (727.4 KB)
View with Adobe Reader on a variety of devices
ePub (864.4 KB)
View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
Mobi (Kindle) (252.9 KB)
View on Kindle device or Kindle app on multiple devices

Updated:February 28, 2024

Document ID:221742

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Introduction

Problem

Solution

Introduction

This document describes how to set the proper capture interface(s) on the Flow Sensor 4240 hardware appliance.

Problem

There are two options for capture interfaces on the Flow Sensor 4240 model. You have the option to use either 4x10G Intel Cards OR 2x40G Qlogic/Marvell cards. If configured incorrectly, you could see traffic mirrored to eth1 and eth2 but Engine Status only displays statistics for eth6 and eth7. In this case we need to configure the proper capture interfaces.

Screenshot of Network Interfaces

Screenshot of Engine Status

Solution

Flow Sensor 4240 can collect on either 4x10G Intel Cards OR on 2x40G Qlogic/Marvell cards.

Access the local webUI of the flow sensor appliance. The monitoring interface selection can be changed on the Advanced Settings of the FlowSensor. Changing the Monitoring Interface Selection results in services restarting.

Screenshot of Advanced Settings