Hi Luca,
I see this:
root@ntop:/etc/nprobe# nprobe --collector-port=4711
--dump-pkts=/tmp/netflow.pcap
07/Apr/2017 09:09:56 [nprobe.c:3407] Valid nProbe license found
07/Apr/2017 09:09:56 [nprobe.c:4586] Dumping incoming packets on
/tmp/netflow.pcap
07/Apr/2017 09:09:56 [nprobe.c:4872] WARNING: The output interfaceId is
set to 0: did you forget to use -Q perhaps ?
07/Apr/2017 09:09:56 [nprobe.c:4875] WARNING: The input interfaceId is
set to 0: did you forget to use -u perhaps ?
07/Apr/2017 09:09:56 [nprobe.c:4916] -i is ignored as
--collector-port|-3 has been used: using '-i none'
07/Apr/2017 09:09:56 [nprobe.c:4975] Welcome to nProbe v.7.4.170215
($Revision: 5334 $) for x86_64-unknown-linux-gnu with native PF_RING
acceleration
07/Apr/2017 09:09:56 [nprobe.c:4985] Running on Debian GNU/Linux 8.2
(jessie)
07/Apr/2017 09:09:56 [nprobe.c:4996] [LICENSE] nProbe SystemId:
9C3A8E0D00001090
07/Apr/2017 09:09:56 [nprobe.c:5085] WARNING: -n parameter is missing.
127.0.0.1:2055 will be used.
07/Apr/2017 09:09:56 [nprobe.c:7308] Welcome to nProbe v.7.4.170215 for
x86_64-unknown-linux-gnu
07/Apr/2017 09:09:56 [plugin.c:1045] 0 plugin(s) enabled
07/Apr/2017 09:09:56 [nprobe.c:6836] Non IPv4/v6 traffic is discarded
according to the template
07/Apr/2017 09:09:56 [util.c:434] GeoIP: loaded AS config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat
07/Apr/2017 09:09:56 [util.c:445] GeoIP: loaded AS IPv6 config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat
07/Apr/2017 09:09:56 [nprobe.c:5495] Using packet capture length 128
07/Apr/2017 09:09:56 [nprobe.c:7484] IPv6 traffic will NOT be
exported/accounted by this probe
07/Apr/2017 09:09:56 [nprobe.c:7485] due to configuration options (e.g.
use NetFlow v9)
07/Apr/2017 09:09:56 [nprobe.c:7631] Not capturing packet from interface
(collector mode)
07/Apr/2017 09:09:56 [collect.c:147] Flow collector listening on port
4711 (IPv4/v6)
07/Apr/2017 09:09:56 [nprobe.c:7856] nProbe started successfully
07/Apr/2017 09:10:18 [export.c:503] WARNING: Unable to export non-IPv4
flows using NetFlow v5. Dropped.
Most notable:
07/Apr/2017 09:09:56 [nprobe.c:7484] IPv6 traffic will NOT be
exported/accounted by this probe
Any suggestions?
TIA
Matthias
Am 06.04.2017 um 15:56 schrieb Luca Deri:
Hi Matthias
just generate a pcap with wireshark where you filter just flows. Until a
template is received, wireshark is unable to decode the traffic, so you can
stop *after* wireshark is able to decode the flows as it means that the
template has been received
Luca
On 6 Apr 2017, at 15:53, Matthias Henze <[email protected]> wrote:
Hi Luca,
generation a pcap is no problem, but what is a "template" in this context?
TIA
Matthias
Am 05.04.2017 um 21:24 schrieb Luca Deri:
Hi Matthias
perhaps the template the Mikrotik is using is not handled properly. Can you
please send me (not to the list) a pcap containing template+some IPv6 flows?
Thanks Luca
On 5 Apr 2017, at 17:25, Matthias Henze <[email protected]> wrote:
Hi,
I use NetFolow to send traffic data from my Microtik routers to Nprobe and
Ntop. This works as expected for IPv4 but no IPv6 traffic is recorded. What may
cause this?
TIA
Matthias
--
MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany
voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: [email protected]
HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
--
MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany
voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: [email protected]
HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
--
MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany
voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: [email protected]
HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
