Thread Info
  • State Not Answered
  • Replies 15 replies
  • Subscribers 0 subscribers
  • Views 2149 views
  • Users 0 members are here
Options
Suggested

[8.162][BUG][OPEN] protocol in flow monitor not correct

wingman
Hi All

as per  https://community.sophos.com/products/unified-threat-management/astaroorg/f/110/t/70485 the issue should have been fixed in version 8.162. However, I am getting port 443,80 and 995 as unclassified (pic attached)

Thanks
Parents Reply Children
  • 0 in reply to wingman
    Hi kai

    I have attached the relevant pic showing port 80 and 995 as unclassified

    Thanks


    Can you provide packet captures of the unclassified flows?
    E.g. for the pop3s connection, you could use:

    tcpdump -ni eth1 -w pop3s.cap -s0 port 995

    replace eth1 with your public network interface, e.g. ppp0.

    Warning: please double-check that the captures do not contain any
    sensitive information (e.g. passwords).

    Also, the capture must contain the start of the connection (i.e., in the
    case of TCP the capture must contain the tcp handshake).
Cookie Information Banner