Hi

> On 26 Jun 2019, at 12:43, [email protected] wrote:
> 
> Hello, 
> 
> We have installed ntopng and nrpobe 
> 
> The selected config is the following : 
> 
> 1FW device (softflowd) --> export to --> port 2055 (nprobe) --> 
> zmq="tcp://*:2056" --> ntopng tcp://127.0.0.1:2056
> 
> 
> I have couple of problem with the install: 
> 
> 
> ## Pb 1 : flow stops to get collected ## 
> 
> 1. upon startup flow get collected "ok" for couple of minutes 
> 2. …then they stop ! 
> 3. If I restart the nprobe / ntopng -- they got collected for couple of 
> minutes and stop again! 
> 
> Maybe It is a licence problem ? 
> This is not very clear. 

Correct. nProbe tells you the status/validity of the license upon startup. 
Without license, it will just export the first 25k flows and then stops.

> 
> 
> ## pb 2 : VLAN flow tagging ## 
> 
> We are trying to classify flows exported from the FW based on the VLAN they 
> originated from. 
> This feature looks nice and would allow us to have a "per VLAN" vision of the 
> flows 
> 
> No matter how hard we try, We only got one VLAN (0) 
> Maybe this is also related to some licence issues… 

Use nProbe template -T "@NTOPNG@" which also contains VLAN information. 
Assuming your softflowd is exporting VLANs in the NetFlow, then you'll see them 
straight into ntopng.

> 
> 
> ## Pb 3 : probe licence ## 
> 
> It is not yet very clear to me if we need one nprobe licence per firewall 
> …or if It is ok to send all flows to one nprobe 

nprobe license is per machine and it does not depend on the number of firewalls 
it's collecting from.


Simone

> 
> 
> Thanks for your help. 
> 
> G.B. 
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to