On 20 Jan 2014, at 23:49, Francesco De Giorgi <[email protected]> wrote:
> Thanks Luca, > I just tried with > > nprobe --zmq "tcp://*:5556" -i none -n none --collector-port 9995 -b 2 > > but I see no sFlow traffic at all. How nprobe knows on which interface > sFlows are arriving? Then nProbe is unable to decode flows. Please send me a capture (full packet) of slow packets sent to nprobe > > With > > nprobe --zmq "tcp://*:5556" -i eth1 -n none --collector-port 9995 -b 2 > > I receive sFlows, but nothing change on ntopng, same problem. It this is wrong. nprobe will send flows containing slow data but not sflow content. Unless you fix the above problem we will not progress Luca > displays that some traffic is sFlow but no additional info (here a > screenshot on my ntopng > https://www.dropbox.com/s/ik0gxfrw1e9ige7/Screenshot%202014-01-20%2012.20.48.png) > > Thanks again, > Francesco > > On Mon, Jan 20, 2014 at 2:50 PM, Luca Deri <[email protected]> wrote: >> Francesco >> set "-i none -n none" on nprobe and try again >> >> luca >> On 01/18/2014 05:40 PM, Francesco De Giorgi wrote: >>> Hi all, >>> I'm running nprobe as a sflow collector as follows (I have a switch >>> sending sflow to port 9995 of eth1 of ) >>> >>> nprobe --zmq "tcp://*:5556" -i eth1 --collector-port 9995 -b 2 >>> >>> and ntopng on the same machine >>> >>> ./ntopng -i "tcp://127.0.0.1:5556" -m 192.168.0.0/16 >>> >>> but I can't understand how ntopng is analyzing sflow. The web page >>> only reports, in percentage, that some traffic is sflow and is coming >>> from the switch, but it doesn't seem to "read" the sflow traffic >>> samples to show information about network traffic. >>> >>> Am I doing something wrong? >>> >>> Thanks, >>> Francesco >>> _______________________________________________ >>> Ntop mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop > > > > -- > Francesco De Giorgi > eXact lab s.r.l. > +39 329 1529493 > www.exact-lab.it > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
