Its receiving now these statics which is good info. I am not sure what it
would gain if Netflow/rrdPlugin packets & traffic would be received but its
definetly very resourceful. Thanks a bunch for you helpFlow Name Packets
Traffic
rrdPlugin 0 0
NetFlow 0 0
LastSeenWatchPlugin 186,098 52.6 MB
Julian
----- Original Message -----
From: "Burton M. Strauss III" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 18, 2004 3:41 PM
Subject: RE: [Ntop] Ntop & Neftlow
> Exactly what it says in the text:
>
> "This value is in the form of a network address and mask on the network
> where the actual NetFlow probe is located. ntop uses this value to
determine
> which TCP/IP addresses are local and which are remote.
>
> You may specify this in either format, <network>/<mask> or CIDR
> (<network>/<bits>). An existing value is displayed in <network>/<mask>
> format.
>
> If the NetFlow probe is monitoring only a single network, then this is all
> you need to set. If the NetFlow probe is monitoring multiple networks,
then
> pick one of them for this setting and use the -m | --local-subnets
parameter
> to specify the others.
>
> This interface is called 'virtual' because the ntop host is not really
> connected to the network you specify here."
>
> And read the articles in docs/FAQ too...
>
> -----Burton
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> > Julian Firrincieli
> > Sent: Tuesday, May 18, 2004 2:27 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [Ntop] Ntop & Neftlow
> >
> >
> > Should the "Set Interface Address" be the address of the NIC card
> > configured on the Ntop box (192.168.168.6/0.0.0.0)?
> >
> > Julian
> >
> >
> > ----- Original Message -----
> > From: "Burton M. Strauss III" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Tuesday, May 18, 2004 3:16 PM
> > Subject: RE: [Ntop] Ntop & Neftlow
> >
> >
> > > Did you change the reporting 'NIC'? Admin | Switch NIC
> > > -----Burton
> > >
> > >
> > > > -----Original Message-----
> > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> > > > Julian Firrincieli
> > > > Sent: Tuesday, May 18, 2004 1:46 PM
> > > > To: [EMAIL PROTECTED]
> > > > Subject: [Ntop] Ntop & Neftlow
> > > >
> > > >
> > > > Hello
> > > >
> > > > May you can help me with my present newbie prob. Thank you for
> > > > any feed back you can provide me with.
> > > >
> > > > Problem description:
> > > >
> > > > Netflow statistics are not popluating
> > > > on the netflow plugin. Wondering if you can help me.
> > > >
> > > >
> > > > Topology :
> > > >
> > > > Router | 66.129.127.1
> > > > |
> > > > |
> > > > |
> > > > FIREWALL
> > > > |
> > > > |
> > > > Ntop host | 192.168.168.6 (eth0)
> > > >
> > > >
> > > >
> > > > Whats working:
> > > >
> > > > IP flow export from Router to Ntop host is
> > > > working based on packet capture. I can see the Cisco Netflow pdu
> > > > output what I am hoping to populate into Ntop.
> > > >
> > > >
> > > >
> > > > Ntop config:
> > > >
> > > > Available Network Interface =
> > > > "NetFlow-device"
> > > > Plugin Netflow =
> > > > active (yes)
> > > > Listening =
> > > > Eth0 (192.168.168.6:2055)
> > > > Set Interface Address =
> > > > 192.168.168.6/0.0.0.0
> > > > Set Aggregation =
> > > > Proto TCP,UDP,ICMP
> > > >
> > > >
> > > >
> > > > Software :
> > > > ntop-3.0-0.i386.rpm = After install
> > > > unpacked the special mac, oui, p2c files
> > > >
> > > >
> > > > Platform : Redhat 9.0
> > > >
> > > >
> > > >
> > > >
> > > > Syslog :
> > > >
> > > >
> > > > Tue 18 May 2004 01:48:18 PM EDT PDA: Welcome to PDAPlugin. (C)
> > > > 2001-2004 by L.Deri and W.Brock
> > > > Tue 18 May 2004 01:48:18 PM EDT RRD: Welcome to rrdPlugin. (C)
> > > > 2002-04 by Luca Deri.
> > > > Tue 18 May 2004 01:48:18 PM EDT SFLOW: Welcome to sFlowPlugin.
> > > > (C) 2002-04 by Luca Deri
> > > > Tue 18 May 2004 01:48:18 PM EDT XML: Welcome to xmldump plugin.
> > > > (C) 2003-2004 by Burton Strauss
> > > > Tue 18 May 2004 01:48:18 PM EDT Calling plugin start
> > functions (if any)
> > > > Tue 18 May 2004 01:48:18 PM EDT RRD: Welcome to the RRD plugin
> > > > Tue 18 May 2004 01:48:18 PM EDT RRD: Mask for new directories is
0700
> > > > Tue 18 May 2004 01:48:18 PM EDT RRD: Mask for new files is 0066
> > > > Tue 18 May 2004 01:48:18 PM EDT THREADMGMT: rrd thread
> > > > (1158883904) started
> > > > Tue 18 May 2004 01:48:18 PM EDT RRD: Started thread (1158883904)
> > > > for data collection.
> > > > Tue 18 May 2004 01:48:18 PM EDT NETFLOW: White list initialized to
''
> > > > Tue 18 May 2004 01:48:18 PM EDT NETFLOW: Black list initialized to
''
> > > > Tue 18 May 2004 01:48:18 PM EDT NETFLOW: FILEDESCRIPTORBUG:
> > > > Work-around activated
> > > > Tue 18 May 2004 01:48:18 PM EDT NETFLOW: Created a socket (14)
> > > > Tue 18 May 2004 01:48:18 PM EDT NETFLOW: Collector listening on
port
> > 2055
> > > > Tue 18 May 2004 01:48:18 PM EDT Creating dummy interface,
> > > > 'NetFlow-device'
> > > > Tue 18 May 2004 01:48:18 PM EDT THREADMGMT: netFlow
> > > > thread(1167272384) started
> > > > Tue 18 May 2004 01:48:18 PM EDT SSL is present but https is
> > > > disabled: use -W for enabling it
> > > > Tue 18 May 2004 01:48:18 PM EDT Note: Reporting device initally
> > > > set to 1 [NetFlow-device]
> > > > Tue 18 May 2004 01:48:19 PM EDT INITWEB: Initializing web server
> > > > Tue 18 May 2004 01:48:19 PM EDT INITWEB: Initializing tcp/ip
> > > > socket connections for web server
> > > > Tue 18 May 2004 01:48:19 PM EDT FILEDESCRIPTORBUG: Work-around
> > activated
> > > > Tue 18 May 2004 01:48:19 PM EDT INITWEB: Initialized socket,
> > > > port 3000, address (any)
> > > > Tue 18 May 2004 01:48:19 PM EDT INITWEB: Waiting for HTTP
> > > > connections on port 3000
> > > > Tue 18 May 2004 01:48:19 PM EDT INITWEB: Starting web server
> > > > Tue 18 May 2004 01:48:19 PM EDT CHKVER: Version file is from
> > > > 'version.ntop.org'
> > > > Tue 18 May 2004 01:48:19 PM EDT CHKVER: as of date is
> > > > '2004-03-22T04:30:00'
> > > > Tue 18 May 2004 01:48:19 PM EDT CHKVER: This version of ntop is
> > > > the CURRENT stable version
> > > > Tue 18 May 2004 01:48:19 PM EDT THREADMGMT: web connections
> > > > thread (28404) started...
> > > > Tue 18 May 2004 01:48:19 PM EDT Note: SIGPIPE handler set (ignore)
> > > > Tue 18 May 2004 01:48:19 PM EDT WEB: ntop's web server is now
> > > > processing requests
> > > > Tue 18 May 2004 01:48:19 PM EDT THREADMGMT: Started thread
> > > > (1175660864) for web server
> > > > Tue 18 May 2004 01:48:19 PM EDT THREADMGMT: pcap dispatch thread
> > > > running...
> > > > Tue 18 May 2004 01:48:20 PM EDT THREADMGMT: Started thread
> > > > (1184049344) for network packet sniffing on eth0
> > > > Tue 18 May 2004 01:49:06 PM EDT NOTE: -L | --use-syslog=facility
> > > > not specified, child processes will log to the default (24).
> > > > Tue 18 May 2004 02:16:35 PM EDT **ERROR** Queue of address '???'
> > > > failed, code -1 [addr queue=0/max=1]
> > > > Tue 18 May 2004 02:16:35 PM EDT ntop processing continues,
> > > > address will not be resolved
> > > > Tue 18 May 2004 02:17:32 PM EDT **ERROR** Queue of address '???'
> > > > failed, code -1 [addr queue=0/max=1]
> > > > Tue 18 May 2004 02:17:32 PM EDT ntop processing continues,
> > > > address will not be resolved
> > > > Tue 18 May 2004 02:29:14 PM EDT **ERROR** Queue of address '???'
> > > > failed, code -1 [addr queue=0/max=1]
> > > > Tue 18 May 2004 02:29:14 PM EDT ntop processing continues,
> > > > address will not be resolved
> > > > Tue 18 May 2004 02:32:57 PM EDT NETFLOW: FILEDESCRIPTORBUG: Bug
> > > > work-around cleanup
> > > > Tue 18 May 2004 02:32:57 PM EDT NETFLOW: Thanks for using
> > ntop NetFlow
> > > > Tue 18 May 2004 02:32:57 PM EDT NETFLOW: Done
> > > > Tue 18 May 2004 02:33:00 PM EDT NETFLOW: White list initialized to
''
> > > > Tue 18 May 2004 02:33:00 PM EDT NETFLOW: Black list initialized to
''
> > > > Tue 18 May 2004 02:33:00 PM EDT NETFLOW: Created a socket (13)
> > > > Tue 18 May 2004 02:33:00 PM EDT NETFLOW: Collector listening on
port
> > 2055
> > > > Tue 18 May 2004 02:33:00 PM EDT NetFlow-device reusing
> > existing device,
> > 1
> > > > Tue 18 May 2004 02:33:00 PM EDT THREADMGMT: netFlow
> > > > thread(1192437824) started
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > >
> > > _______________________________________________
> > > Ntop mailing list
> > > [EMAIL PROTECTED]
> > > http://listgateway.unipi.it/mailman/listinfo/ntop
> >
> > _______________________________________________
> > Ntop mailing list
> > [EMAIL PROTECTED]
> > http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
