Hi, I am new to Ntop (and nProbe) and have scanned the last few months of this mailing list archives and have read the faq/documentation/ mini-howtos.
I still have some questions that haven't been answered or I wasn't able understand what I've read. My goal is to setup nProbe on multiple subnets that emit/export data back to a single Ntop server (which will reside on one of those subnets). Our Ntop is started with: /usr/bin/ntop -i none -m 10.2.0.0/16 -d -L In the Admin:Plugins:NetFlow page we have set: Under "Plugin Preferences": Local Collector UDP Port: 2055 Local Network IP Address/Mask: 0.0.0.0/0.0.0.0 White list: Black list: Outgoing Flows: 0.0.0.0 Under "Flow Export Preferences": NetFlow-device: No Is this the correct configuration for what we want? On the bottom section of this page, there is a table with Flow Statistics and Ignored Flows. What are "ignored flows" and "problem flows" and why do they exist? After leaving this setup running for a while using both the current demo version of nProbe (limit 1000 flows) as well as the recently announced test version (expired July 30), it doesn't appear that Ntop is able to shows much information. Only two pages show any data: - IP Protos: IP Protocol Distribution - Stats: Global Traffic Statistics Curiously, the "Total: NetFlows" page shows 0 packets and 0 traffic. Is this the proper behaviour? I don't think so since the data presented by Ntop is so barren compared to running Ntop standalone. I am hoping to be able to demo the Ntop+nProbe setup and then purchase nProbe for the live implementation use. Thanks, Andy Lee _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
