The 'Net flow device' is a pseudo-device, constructed with the data ntop receives from the flows. That's the device to report from if you want to see the flows.
Check using netstat and make sure ntop is the listener on 2055 ... maybe something else is? $ lsof -i | grep '*:2055' or $ netstat --all --programs | grep '*:' [root@tigger root]# netstat --all --programs | grep '*:2055' udp 0 0 *:2055 *:* 15556/ntop [root@tigger root]# lsof -i | grep '*:2055' ntop 15556 ntop 15u IPv4 394572 UDP *:2055 ntop 15561 ntop 15u IPv4 394572 UDP *:2055 ntop 15562 ntop 15u IPv4 394572 UDP *:2055 ntop 15563 ntop 15u IPv4 394572 UDP *:2055 ntop 15564 ntop 15u IPv4 394572 UDP *:2055 ntop 15565 ntop 15u IPv4 394572 UDP *:2055 ntop 15566 ntop 15u IPv4 394572 UDP *:2055 ntop 15567 ntop 15u IPv4 394572 UDP *:2055 ntop 15568 ntop 15u IPv4 394572 UDP *:2055 ntop 15574 ntop 15u IPv4 394572 UDP *:2055 [root@tigger root]# Are there any log messages? -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tony Hernandez Sent: Friday, February 21, 2003 8:21 AM To: [EMAIL PROTECTED] Subject: RE: [Ntop] Help with netflows? I'm having a lot of trouble finding how-to's/doc's on this. Could you elaborate some perhaps? I have the router exporting netflow to this machine in particular on 2055 but ntop doesnt see it, is there a command line arg or something ? I'm listening for netflows on one of the interfaces - with flowtools I can see that flows are coming in. In Ntop there is a section where you list your interfaces, in my case i have fxp0 ( in border mode ) and dc0 listening for netflows from a local router. There is also a "Net Flow Device" listed there. I have tried enabling that in ntop still with no results. Forgive me, im pretty new to netflows... atleast a week old that is :) -----Original Message----- From: Burton M. Strauss III [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 20, 2003 5:02 PM To: [EMAIL PROTECTED] Subject: RE: [Ntop] Help with netflows? Have you switched your reporting to the netflow pseudo-device? Admin | Switch NIC -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tony Hernandez Sent: Thursday, February 20, 2003 3:54 PM To: [EMAIL PROTECTED] Subject: [Ntop] Help with netflows? Hi, I have been trying to get netflow data from a router and have not been able to recieve anything as of yet. I setup Ntop to listen on port 2055: Incoming Local Collector UDP Port: 2055 Remote Collector IP Address 0.0.0.0:2055 I just dont seem to be getting anything to ntop. Is there something im missing ? I have verified with flowtools that there is netflow data bieng sent to this machine on port 2055 just cant see it in ntop. Is anyone else doing netflow's with ntop? as usual any help/comments are greatly appreciated. _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
