I'm reading your question as asking how to get Ntop to *only* listen for NetFlow flows and NOT sniff any physical interface, right? Quite simple, actually.
Well, here goes (this is strictly from memory so please chime in if I missed/botched something): Step 1: start Ntop, don't worry about options for now. Step 2: Enable NetFLow plug-in Step 3: Setup NetFLow virtual device - this is a separate discussion. The big thing is just that the IP and port match what your router is configured to send to. Step 4: Go to "Switch NIC" to and note what Ntop named your new virtual device. There is (obviously) a convention for this - I just don't remember what it is and actually checking it is most reliable anyhoo. Step 5: Shut down Ntop Step 6: Start Ntop back up, configured however you like, with the -interface flag pointing to <Netflow-device> (the name you got in Step 4). Chris -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Stewart Sent: Wednesday, January 05, 2005 11:47 AM To: [email protected] Subject: [Ntop] Netflow from Cisco ********************************************************************** Confidential/Proprietary Note The information in this email is confidential and may be legally privileged. Access to this email by anyone other than the intended addressee is unauthorized. If you are not the intended recipient of this message, any review, disclosure, copying, distribution, retention, or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you are not the intended recipient, please reply to or forward a copy of this message to the sender and delete the message, any attachments, and any copies thereof from your system. Thank you. Guardian Mortgage Documents, Inc. 225 Union Boulevard, Suite 200 Lakewood, CO 80228. ********************************************************************** -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi there.. I'm new to this list, but I can't find in the docs how to setup Ntop (step by step) to do *only* netflow? I have it running from a spanned port on one of our 6509's currently and it works perfect.. really great software.. Anyone have a doc or pointer they could send me? I have a 7513 I'd like to use for netflow... Thanks, Paul -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQA/AwUBQdw2LV+5HU9MX4X1EQJOFACfU93tDQntln6B7E8wFyLtwVK6+EAAn2Nh V2tZsFY9mpnjfLiEdEssO9Sm =ribV -----END PGP SIGNATURE----- _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop ********************************************************************** Confidential/Proprietary Note The information in this email is confidential and may be legally privileged. Access to this email by anyone other than the intended addressee is unauthorized. If you are not the intended recipient of this message, any review, disclosure, copying, distribution, retention, or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you are not the intended recipient, please reply to or forward a copy of this message to the sender and delete the message, any attachments, and any copies thereof from your system. Thank you. Guardian Mortgage Documents, Inc. 225 Union Boulevard, Suite 200 Lakewood, CO 80228. ********************************************************************** _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
