I am using nProbe to send netflow V5 to another machine for processing.
Specifically, I want to import this data into Mysql. I read that
flow-tools would come in handy. I have successfully sent the netflow
stream from nProbe on the router to flow-capture on the DB server,
which exports the flow to files rotated every 15 minutes.
After the first rotation, I ran flow-print on the completed dump, which
gave me valid, useful data. However, I get an error when running the
file through the readFlowdump.pl script included in the nProbe package
I purchased:
Argument "M-O^P^A^C" isn't numeric in read at
/usr/local/src/nProbe/readFlowDump.pl line 194.
Sounds like readFlowDump.pl is expecting a different format. Here are
the command lines I am using through this entire process:
router: ./nprobe -n 10.1.1.11:2055 -i eth0
server: ./flow-capture -p /var/run/netflow/flow-capture.pid \
-w /home/netflow/flow-capture -V 5 0/0/2055
server: cp ft-v05.2004-12-03.091501-0500 temp
server: ./readFlowDump.pl temp
Argument "M-O^P^A^C" isn't numeric in read at
/usr/local/src/nProbe/readFlowDump.pl line 194.
So while the error _sounds_ like a protocol version discrepancy, I
have made certain the versions are all the same throughout this
process.
Any ideas to help me understand how to use these tools are greatly
appreciated.
--thanks!
_______________________________________________
Ntop-dev mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
