|
Sounds like the packets are not being
properly interpreted. Can you capture a couple and break them
down by hand to see what’s in them? You’ll need the v5
layouts which are in the netflowPlugin.c and .h files, plus tcpdump with
appropriate options to capture full packets and dump in hex. tcpdump –i <interface> -c5 –s
1500 –X port 2055 ----- From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Worrell Hello, I have enabled NetFlow on the two serial interfaces of my
2851, in Ingress mode, using NetFlow V5 setup. I have the same PC with
Ntop receiving the data. My issue is that Ntop says I have received
Terabytes of Data since turning this on, and also shows IP address like 0.1.0.1
and 1.0.0.3. Can anyone assist me, I am confused as to where the issue
lies. Thanks Brian |
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
