I've been hacking at this most of the day trying to get it working and failing
miserably.
Nprobe is collecting on from a fprobe netflow. Ntopng can collect from eth0.
I'm not seeing any results from nprobe to ntopng via zmq on localhost.
Versions:
nprobe v.6.14.130920 ($Revision: 3645 $) for x86_64-unknown-linux-gnu with
native PF_RING acceleration
Welcome to ntopng x86_64 v.1.0.1 (r) - (C) 1998-13 ntop.org
ntopng-1.0.1_6783-6783.x86_64
Ntopng config and output:
cat /etc/ntopng/ntopng.conf
-G=/var/run/ntopng/ntopng.pid
-m '10.X.X.0/24'
-i="tcp://127.0.0.1:5556"
-d=/opt/ntopng
-U= ntop
# Set the HTTP Documents Directory
--httpdocs-dir=/usr/local/share/ntopng/httpdocs
# Set the Scripts Directory
--scripts-dir=/usr/local/share/ntopng/scripts
# Set the Callbacs Directory
--callbacks-dir=/usr/local/share/ntopng/scripts/callbacks
--verbose
ntopng /etc/ntopng/ntopng.conf
20/Sep/2013 15:57:35 [Redis.cpp:54] Succesfully connected to Redis 64 bit
v.2.4.10
20/Sep/2013 15:57:35 [Ntop.cpp:438] Setting local networks to '10.2.60.0/24'
20/Sep/2013 15:57:35 [AddressResolution.cpp:129] Rule ''10.2.60.0'/'24''
20/Sep/2013 15:57:35 [AddressResolution.cpp:150] ERROR: Error parsing IPv4
'10.2.60.0
20/Sep/2013 15:57:35 [Ntop.cpp:487] Registered interface
[email protected]:5556" [id: 0]
20/Sep/2013 15:57:35 [Utils.cpp:235] User changed to ntop
20/Sep/2013 15:57:35 [main.cpp:189] PID stored in file
/var/run/ntopng/ntopng.pid
20/Sep/2013 15:57:35 [HTTPserver.cpp:338] HTTP server listening on port 3000
[/usr/local/share/ntopng/httpdocs][/usr/local/share/ntopng/scripts]
20/Sep/2013 15:57:35 [main.cpp:221] Using RRD version 1.4.7
20/Sep/2013 15:57:35 [main.cpp:230] Working directory: /opt/ntopng
20/Sep/2013 15:57:35 [main.cpp:232] Scripts/HTML pages directory:
/usr/local/share/ntopng
20/Sep/2013 15:57:35 [Ntop.cpp:164] Welcome to ntopng x86_64 v.1.0.1 (r) - (C)
1998-13 ntop.org
20/Sep/2013 15:57:35 [PeriodicActivities.cpp:53] Started periodic activities
loop...
20/Sep/2013 15:57:35 [NetworkInterface.cpp:514] Started packet polling on
interface [email protected]:5556"...
20/Sep/2013 15:57:35 [CollectorInterface.cpp:81] Running flow collector
[email protected]:5556"..
[/usr/local/share/ntopng/scripts/callbacks/nprobe-collector.lua]
20/Sep/2013 15:57:35 [Lua.cpp:1232] Starting ZMQ collector on
[email protected]:5556"
20/Sep/2013 15:57:35 [Lua.cpp:1433] WARNING: Script failure
[/usr/local/share/ntopng/scripts/callbacks/nprobe-collector.lua][flow]
20/Sep/2013 15:57:35 [HTTPserver.cpp:253] [HTTP] /lua/network_load.lua
20/Sep/2013 15:57:35 [HTTPserver.cpp:253] [HTTP] /lua/network_load.lua
20/Sep/2013 15:57:37 [HTTPserver.cpp:253] [HTTP] /lua/network_load.lua
20/Sep/2013 15:57:39 [HTTPserver.cpp:253] [HTTP] /lua/network_load.lua
20/Sep/2013 15:57:40 [HTTPserver.cpp:253] [HTTP] /lua/network_load.lua
20/Sep/2013 15:57:41 [HTTPserver.cpp:253] [HTTP] /lua/network_load.lua
^C20/Sep/2013 15:57:43 [main.cpp:37] Shutting down...
20/Sep/2013 15:57:45 [ProtoStats.cpp:35] [IPv4] 0 B/0.00 Packets
20/Sep/2013 15:57:45 [ProtoStats.cpp:35] [IPv6] 0 B/0.00 Packets
20/Sep/2013 15:57:45 [ProtoStats.cpp:35] [ARP] 0 B/0.00 Packets
20/Sep/2013 15:57:45 [ProtoStats.cpp:35] [MPLS] 0 B/0.00 Packets
20/Sep/2013 15:57:45 [ProtoStats.cpp:35] [Other] 0 B/0.00 Packets
20/Sep/2013 15:57:45 [Ntop.cpp:513] Interface [email protected]:5556"
[running: 0]
20/Sep/2013 15:57:45 [main.cpp:55] Deleted PID /var/run/ntopng/ntopng.pid [rc:
0]
20/Sep/2013 15:57:45 [NetworkInterface.cpp:140] Interface
[email protected]:5556" shutdown
20/Sep/2013 15:57:45 [HTTPserver.cpp:349] HTTP server terminated
20/Sep/2013 15:57:45 [AddressResolution.cpp:185] Address resolution stats [0
resolved][0 failures]
Nprobe:
# nprobe --zmq "tcp://*:5556" -i none -n none --collector-port 2055 -b 0
20/Sep/2013 14:38:58 [nprobe.c:5483] ERROR: Invalid or missing nProbe license
(/etc/nprobe.license)
20/Sep/2013 14:38:58 [nprobe.c:5493] ERROR: for 68AE4083550561EF
20/Sep/2013 14:38:58 [nprobe.c:5498] ERROR:
***************************************************
20/Sep/2013 14:38:58 [nprobe.c:5499] ERROR: **
**
20/Sep/2013 14:38:58 [nprobe.c:5500] ERROR: ** Switching to DEMO MODE due to
license error **
20/Sep/2013 14:38:58 [nprobe.c:5501] ERROR: **
**
20/Sep/2013 14:38:58 [nprobe.c:5502] ERROR: ** Create your nProbe license at
**
20/Sep/2013 14:38:58 [nprobe.c:5503] ERROR: **
http://www.nmon.net/mklicense/ **
20/Sep/2013 14:38:58 [nprobe.c:5504] ERROR: **
**
20/Sep/2013 14:38:58 [nprobe.c:5505] ERROR:
***************************************************
20/Sep/2013 14:38:58 [nprobe.c:5525] ERROR:
***************************************************************
20/Sep/2013 14:38:58 [nprobe.c:5526] ERROR: * NOTE: This is a DEMO version
limited to 25000 flows export. *
20/Sep/2013 14:38:58 [nprobe.c:5527] ERROR:
***************************************************************
20/Sep/2013 14:38:58 [plugin.c:157] No plugins found in ./plugins
20/Sep/2013 14:38:58 [nprobe.c:3486] Succesfully created zmq endpoint
tcp://*:5556
20/Sep/2013 14:38:58 [nprobe.c:3645] WARNING: The output interfaceId is set to
0: did you forget to use -Q perhaps ?
20/Sep/2013 14:38:58 [nprobe.c:3648] WARNING: The input interfaceId is set to
0: did you forget to use -u perhaps ?
20/Sep/2013 14:38:58 [nprobe.c:3700] Welcome to nprobe v.6.14.130920
($Revision: 3645 $) for x86_64-unknown-linux-gnu with native PF_RING
acceleration
20/Sep/2013 14:38:58 [nprobe.c:3713] nProbe SystemId: 68AE4083550561EF
20/Sep/2013 14:38:58 [dbPlugin.c:78] Initializing DB plugin
20/Sep/2013 14:38:58 [nprobe.c:5543] Welcome to nprobe v.6.14.130920 for
x86_64-unknown-linux-gnu
20/Sep/2013 14:38:58 [plugin.c:871] 0 plugin(s) enabled
20/Sep/2013 14:38:58 [util.c:305] GeoIP: loaded AS config file GeoIPASNum.dat
20/Sep/2013 14:38:58 [util.c:314] GeoIP: loaded AS IPv6 config file
GeoIPASNumv6.dat
20/Sep/2013 14:38:58 [nprobe.c:4217] Using packet capture length 128
20/Sep/2013 14:38:58 [nprobe.c:5719] IPv6 traffic will NOT be
exported/accounted by this probe
20/Sep/2013 14:38:58 [nprobe.c:5720] due to configuration options (e.g. use
NetFlow v9)
20/Sep/2013 14:38:58 [nprobe.c:5847] Not capturing packet from interface
(collector mode)
20/Sep/2013 14:38:58 [collect.c:156] Flow collector listening on port 2055
(IPv4/v6)
^C20/Sep/2013 15:43:44 [nprobe.c:365] Received shutdown request...
20/Sep/2013 15:43:45 [engine.c:2476] About to flush hash (threadId 0)
20/Sep/2013 15:43:45 [engine.c:2478] Completed hash walk (thread 0)
20/Sep/2013 15:43:46 [nprobe.c:2020] Processed packets: 0 (max bucket search: 1)
20/Sep/2013 15:43:46 [nprobe.c:2003] Fragment queue length: 0
20/Sep/2013 15:43:46 [nprobe.c:2029] Flow export stats: [0 bytes/0 pkts][0
flows/0 pkts sent]
20/Sep/2013 15:43:46 [nprobe.c:2036] Flow collection: [collected pkts:
16992][processed flows: 509760]
20/Sep/2013 15:43:46 [nprobe.c:2039] Flow drop stats: [0 bytes/0 pkts][0
flows]
20/Sep/2013 15:43:46 [nprobe.c:2044] Total flow stats: [0 bytes/0 pkts][0
flows/0 pkts sent]
Thanks for any help.
Louis
Louis R. Gordner
Sr. Infrastructure Engineer
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
