Actually, for nProbe and non-ntop questions you really should use the
ntop-misc list. 

http://lists.ntop.org/mailman/listinfo/ntop-misc

-----Burton


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Adam J. Henry
Sent: Friday, December 03, 2004 3:24 PM
To: [EMAIL PROTECTED]
Subject: Re: [Ntop-dev] nprobe -> flow-capture -> readFlowDump.pl -> mysql

On Fri, Dec 03, 2004 at 04:06:17PM -0500, Adam J. Henry wrote:
> I am using nProbe to send netflow V5 to another machine for processing.
> Specifically, I want to import this data into Mysql.  I read that 
> flow-tools would come in handy.  I have successfully sent the netflow 
> stream from nProbe on the router to flow-capture on the DB server, 
> which exports the flow to files rotated every 15 minutes.
> 
> After the first rotation, I ran flow-print on the completed dump, 
> which gave me valid, useful data.  However, I get an error when 
> running the file through the readFlowdump.pl script included in the 
> nProbe package I purchased:
> 
>       Argument "M-O^P^A^C" isn't numeric in read at
>       /usr/local/src/nProbe/readFlowDump.pl line 194.
> 
> Sounds like readFlowDump.pl is expecting a different format.  Here are 
> the command lines I am using through this entire process:
> 
>       router: ./nprobe -n 10.1.1.11:2055 -i eth0
> 
>       server: ./flow-capture -p /var/run/netflow/flow-capture.pid \
>               -w /home/netflow/flow-capture -V 5 0/0/2055
> 
>       server: cp ft-v05.2004-12-03.091501-0500 temp
> 
>       server: ./readFlowDump.pl temp
> 
>               Argument "M-O^P^A^C" isn't numeric in read at
>               /usr/local/src/nProbe/readFlowDump.pl line 194.
> 
> So while the error _sounds_ like a protocol version discrepancy, I 
> have made certain the versions are all the same throughout this 
> process.
> 
> Any ideas to help me understand how to use these tools are greatly 
> appreciated.
> 
> --thanks!

Sorry, just noticed I sent to the devel list instead of the normal list.  I
apologize for this lack of insight, and will postpone my cross-posting until
I am ignored =)

_______________________________________________
Ntop-dev mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

_______________________________________________
Ntop-dev mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

Reply via email to