QRadar

Expand all | Collapse all

10 Gb Flow Collector

  • 1.  10 Gb Flow Collector

    Posted 10 days ago

    Does anyone have a 10 Gb flow collector working with a network card other than an Endace or Napatech?  

    We are running a software install on our own Dell Hardware with Intel x520 10 Gb network card and Qradar misidentifies it as an Endace card and it does not work.

    Thanks very much.

    ------------------------------
    Craig Edgmand
    ------------------------------


  • 2.  RE: 10 Gb Flow Collector

    Posted 10 days ago
    Edited by Dale Bowie 9 days ago
    Hi Craig,

    Unfortunately this sounds like a defect. If you reach out to support we can provide a temporary workaround until the issue is fixed properly. 

    ------------------------------
    Dale Bowie
    ------------------------------



  • 3.  RE: 10 Gb Flow Collector

    Posted 8 days ago
    Dale,

        I do have a ticket open with support as well. 

    Thanks,

    Craig

    ------------------------------
    Craig Edgmand
    ------------------------------



  • 4.  RE: 10 Gb Flow Collector

    Posted 5 days ago
    Hi,

    I'm not sure Qradar supports full packet capture on Intel's X520 10gb interface. I'm quite sure you need a network capture card like Napatech.

    Although, you should be able to collect Netflow, Jflows, etc on these interfaces if you create your flow sources. If you need more instruction, I can help.

    Regards,

    ------------------------------
    Anthony Gayadeen
    ------------------------------