Well, I played with turning it on and off on the plugin screen, I currently have it off, and am picking up tons of data from my gateway router cisco, I see that soon my ntop will be killing the machine however, it's growing out of control, the hash isn't resetting itself at all anymore, probably why it's not crashed yet, hasn't cleared the hash out of memory, it used to die after reached the 32768 Hash, I see it's up to Apr 26 13:07:59 tc3net ntop[22492]: Extending hash size [newSize=65536][deviceId=1]. Oh well hopefully Burton is checking the list out, it almost is working properly as I said.
Regards MIKE On Fri, 2002-04-26 at 15:53, Eugene Spiker wrote: > Mike, > > I have a Cisco 6509 set up to send to my Linux system on port 2055. > > I started Ntop and configured the Netflow plugin to receive on port > 2055. Do I turn on the eth0 device and/or the netflow device on the > plugin screen? I have tried different combinations. > > I then went to the admin screen and selected the netflow device as the > NIC. > > The switch says it is sending packets, the count keeps going up. The > Netflow screen on the DataSent and DataRcvd screens is not incrementing. > I don't see any information on any of the other screens. > > I am running the snapshot from 26-4-2002. > > I am running Redhat 7.2. Both the switch and the Linux box are on the > same lan. Do you know if there is anything that would need to be done to > the Linux system? > > Anyway, thanks for you assistance. > > Gene > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of > Michael Baird > Sent: Friday, April 26, 2002 3:10 PM > To: [EMAIL PROTECTED] > Subject: RE: [Ntop] Ntop 26-4-2002 > > > Yes, I'm using it as a collector, it includes a plugin, which really > hasn't functioned properly, until today (still running as of 4 hours), > I'm running Ntop with very little options, just testing. > > /usr/local/bin/ntop -u root -d > > Once you do this, go to the web interface at http://domain.com:3000, and > hit the stats link, and then configure plugins, enable the netflow > plugin,set up your port for collecting that your cisco will send to, > then go to admin at the top and change NIC to the netflow device. Like I > said today's is the first version that I've got working past a 1/2 hour, > and it's still running, so it's a work in progress. > > Regards > MIKE > > On Fri, 2002-04-26 at 14:54, Eugene Spiker wrote: > > Mike, > > > > Could you eloborate on how you use Ntop with NetFlow. What command > > line flags, etc. > > > > My assumption is that the Ntop program can act as the collector for > > the Netflow packets from a router or switch and display the > > information. > > > > I have attempted to get it running a couple of times with no luck. > > > > Thanks, > > > > Gene > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of > > Michael Baird > > Sent: Friday, April 26, 2002 12:07 PM > > To: [EMAIL PROTECTED] > > Subject: [Ntop] Ntop 26-4-2002 > > > > > > Great snapshot, this one seems to working properly, netflow import is > > working again, the intop patch must of been included, only problem > > I've noticed so far, is resetting stats segfaults it, and Mozilla > > doesn't like the lack of a close comment after the charset command (it > > > adds a comment on it's own at the end, resulting in the whole frameset > > > being commented out), and I'd like to be able to start it up > > specifying the netflow device as the default, rather then eth0. > > > > Regards > > MIKE > > > > > > > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop > > > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
