You should be able to send NetFlows directly to Ntop from the Cisco (sorry to state the obvious). My guess its either a config issue on the Cisco or something in the network in between (e.g. firewall rule).
So you have an nProbe sniffing the Cisco's Ethernet interface? Then sending NetFlow to Ntop? That tells me Ntop is working anyway. Is the nProbe's sending interface in the same segment as the Cisco? At both layer 2 and 3? If not, what's the difference in network connectivity from their locations to Ntop? I would suggest for starters to start tracing back from nTop. Start by using Ntop to look for the Netflow packets on its own ethernet interface that you should be recieving those flows on. If not, try to put in a sniffer at a point farther up the line. Conversely, you could go the other way and check the cisco interface (if possible) where those flows should be originating (the one nProbe is on?). Good luck. I had a similar situation that turned out to be a Cisco VPN issue........ -----Original Message----- Subject: RE: [Ntop] Still a bit confused about netflow Date: Fri, 21 May 2004 17:28:20 -0400 From: "Margret Treiber" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Ok, I had it coming directly from the cisco router. Now I have a win machine running the nprobe demo in between and it seems to be working. So now it goes, Cisco router --> nprobe machine --> ntop. Kinda the long way around, but it seems to be working. Margret A Treiber Network Engineer Avectra www.avectra.com [EMAIL PROTECTED] T: 703 394 0980 X1231 F: 703 394 0985 _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
