QRadar

Expand all | Collapse all

10 Gb Flow Collector

  • 1.  10 Gb Flow Collector

    Posted Wed February 06, 2019 11:08 AM

    Does anyone have a 10 Gb flow collector working with a network card other than an Endace or Napatech?  

    We are running a software install on our own Dell Hardware with Intel x520 10 Gb network card and Qradar misidentifies it as an Endace card and it does not work.

    Thanks very much.

    ------------------------------
    Craig Edgmand
    ------------------------------


  • 2.  RE: 10 Gb Flow Collector

    Posted Thu February 07, 2019 02:45 AM
    Edited by Dale Bowie Thu February 07, 2019 06:52 PM
    Hi Craig,

    Unfortunately this sounds like a defect. If you reach out to support we can provide a temporary workaround until the issue is fixed properly. 

    ------------------------------
    Dale Bowie
    ------------------------------



  • 3.  RE: 10 Gb Flow Collector

    Posted Fri February 08, 2019 08:35 AM
    Dale,

        I do have a ticket open with support as well. 

    Thanks,

    Craig

    ------------------------------
    Craig Edgmand
    ------------------------------



  • 4.  RE: 10 Gb Flow Collector

    Posted Mon February 11, 2019 06:07 PM
    Hi,

    I'm not sure Qradar supports full packet capture on Intel's X520 10gb interface. I'm quite sure you need a network capture card like Napatech.

    Although, you should be able to collect Netflow, Jflows, etc on these interfaces if you create your flow sources. If you need more instruction, I can help.

    Regards,

    ------------------------------
    Anthony Gayadeen
    ------------------------------