Cory - please check the statistics inside the netflow plugin. Can you send me a dump (html or pdf) of your netflow configured page? - make sure that you switched ntop to the netflow interface - make sure you don't have a firewall that drops flows
Luca On Aug 13, 2010, at 11:31 PM, Cory Peterson wrote: > Hello Luca, > > I have tried that but for some reason I am still not seeing any netflow > information. I can see the packets coming in to the box on tcpdump. > > Cory > > On Fri, Aug 13, 2010 at 12:23 AM, Luca Deri <[email protected]> wrote: > > Corey > You need to enable the netflow plugin, create a virtual interface with > destination port 9996 and switch the top web interface to the net flow > interface. > > Luca > --- > Luca Deri <[email protected]> > > Il giorno 12/ago/2010, alle ore 23.47, Cory Peterson <[email protected]> ha > scritto: > >> I am working on trying to compile 4.0 now. >> Will let you know how it goes. >> >> Thanks! >> Cory >> >> On Thu, Aug 12, 2010 at 3:41 PM, Gary Gatten <[email protected]> wrote: >> In the web GUI, “About, Configuration” will show you most everything related >> to the config. Down at the bottom will be a link to a text version for even >> more detail. >> >> >> I suspect you used a prebuilt package? Perhaps from a source version that >> had some issues. Assuming your flow exports are formatted correctly, ntop >> usually works without issue. Are you able to fetch and compile the latest >> release? I’m still on 3.4-pre3. I intend to upgrade to v4.x soon in hopes >> to address a few bugs and get some new features – such as threshold alarms! >> >> >> G >> >> >> >> From: [email protected] >> [mailto:[email protected]] On Behalf Of Cory Peterson >> Sent: Thursday, August 12, 2010 4:18 PM >> To: [email protected] >> Subject: Re: [Ntop] Netflow >> >> >> Linux Version: >> >> Linux nistnetsrv 2.6.32-23-generic-pae #37-Ubuntu SMP Fri Jun 11 09:26:55 >> UTC 2010 i686 GNU/Linux >> >> >> NTOP version: >> >> 3.3 >> >> >> Not sure where to find the config file in Ubuntu, I look >> /var/lib/ntop/init.cfg but it only had 2 lines in it. >> >> >> >> >> On Thu, Aug 12, 2010 at 10:35 AM, Gary Gatten <[email protected]> wrote: >> >> Pls post more info; version, config, etc. >> >> >> From: [email protected] <[email protected]> >> >> To: [email protected] <[email protected]> >> Sent: Thu Aug 12 10:23:47 2010 >> Subject: Re: [Ntop] Netflow >> >> Yes, I have also tried to start it with no physical nic. >> >> >> ntop -u root -i none >> >> >> >> -Cory >> >> >> On Thu, Aug 12, 2010 at 9:22 AM, Gary Gatten <[email protected]> wrote: >> >> Did you select the netflow nic so ntop will display that info? Else it (ntop >> reports) defaults to the real nic in the system. >> >> >> From: [email protected] <[email protected]> >> To: [email protected] <[email protected]> >> Sent: Thu Aug 12 09:02:18 2010 >> Subject: [Ntop] Netflow >> >> Hello, >> >> >> I have been trying to get netflow to work on NTOP. I have configured the >> router and can see netflow packets (using tcpdump) hitting the interface on >> my NTOP box. I am using port 9996 for Netflow and have configured that on >> both device. This is running on a Ubuntu box. >> >> >> I am not sure what else to look at and can't seem to find much on this issue >> when googling. >> >> >> Thanks! >> >> Cory >> >> "This email is intended to be reviewed by only the intended recipient and >> may contain information that is privileged and/or confidential. If you are >> not the intended recipient, you are hereby notified that any review, use, >> dissemination, disclosure or copying of this email and its attachments, if >> any, is strictly prohibited. If you have received this email in error, >> please immediately notify the sender by return email and delete this email >> from your system." >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> >> "This email is intended to be reviewed by only the intended recipient and >> may contain information that is privileged and/or confidential. If you are >> not the intended recipient, you are hereby notified that any review, use, >> dissemination, disclosure or copying of this email and its attachments, if >> any, is strictly prohibited. If you have received this email in error, >> please immediately notify the sender by return email and delete this email >> from your system." >> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> >> "This email is intended to be reviewed by only the intended recipient and >> may contain information that is privileged and/or confidential. If you are >> not the intended recipient, you are hereby notified that any review, use, >> dissemination, disclosure or copying of this email and its attachments, if >> any, is strictly prohibited. If you have received this email in error, >> please immediately notify the sender by return email and delete this email >> from your system." >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop --- If you can not measure it, you can not improve it - Lord Kelvin
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
