OK, thanks - this is getting into proper Netflow configuration, which I
should research on my own.
But I'm very happy to have data now :)
Gary Gatten wrote:
Typically you need to "export" from at least two interfaces, unless your IOS supports "ip flow ingress" and "ip flow egress" on the same interface?
Network load is "accurate", although it doesn't distinguish between Tx and Rx :(
----- Original Message -----
From: [email protected] <[email protected]>
To: [email protected] <[email protected]>
Sent: Fri Apr 30 11:28:25 2010
Subject: Re: [Ntop] No data in Netflow on FreeBSD 7.0
Gary Gatten wrote:
I noticed something similar re the admin login. Try using admin for the pw, or
ntop or something...
yup, admin:admin worked
As for graph confidence, some are whacked for sure, but throughput is pretty accurate.
Make sure your netflow confs "see" all the traffic! Usually this is
misconfigured and ntop only sees half the conversation. Timers should be 10secs for
inactive and 60secs for active IMO.
Exporting device is a 1Fe (2 vlan sub int), 2 x T1 (in a multilink)
26xx. I'm only exporting the Fe (on the base interface, not subs), since
the multilink this is also natting, and the multilink is the nat outside.
Occurs to me I misstated - it's not the throughput graph I'm thinking
of, but the Summary:Network Load
----- Original Message -----
From: [email protected] <[email protected]>
To: [email protected] <[email protected]>
Sent: Fri Apr 30 11:08:18 2010
Subject: Re: [Ntop] No data in Netflow on FreeBSD 7.0
Holy Moly - svn (4253) build works! Or, at least I have data on both
local and Netflow interfaces. Still looking at the data to see if it
makes sense.
I have noticed before that the Throughput numbers don't match our Cacti
graphs even a little (800k vs 3M). Not ready to chase that quite yet. I
suppose cache timeout active on the router might be related.
One odd thing I've bumped into with the svn checkout is I seem to lose
the ability to login to admin. When I first start, I get the password
set prompts, and am then able to login. Then if I shutdown ntop and
restart (doesn't matter whether daemon mode or interactive), I then
can't get past the login to get into the admin functions. I realize this
is dev code, so this is just a note...
thank you again for your time
tim
Gary Gatten wrote:
I would try svn, I can't say what's actually in the tar. Agree with you on
ports. Makes me long for the day of static/monolythic exe's. Can't understand
why some developers insist on using a library with two dozen other dependancies
for one simple function! But I digress...
<early bit of thread snipped, cause even though I'm a heretic about top
posting, these things still don't need to be sooo long...>
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
--
Tim Palmer
BestWeb Support
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop