Yes. If you want separate virtual interfaces, they need to use unique port #s.
I suspect that the code doesn't actually test if the inbound port # is reused, but it won't work properly. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Gatten Sent: Thursday, April 20, 2006 3:59 PM To: [EMAIL PROTECTED]; [email protected] Subject: RE: Re: [Ntop] Can not monitor more than one netflow device It's been awhile since I looked at this, but I recall having to use a unique port for each virtual interface? I could be wrong, it's just what I recall and my memory seems a little broken these days. I'll take a closer look tomorrow as well. Gary >>> [EMAIL PROTECTED] 4/20/2006 3:53:21 PM >>> Thanks for your quick reply... I am already using different netflow virtual interfaces, that way ntop should distinguish between traffic from Cisco and PacketShaper. I have checked FAQ but found nothing about using different udp ports for each provider. I'll give a try tomorrow, meanwhile more ideas are welcomed :) Regards, Cesar ---------------------------------------- > Date: Thu, 20 Apr 2006 15:40:32 -0500 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED]; [email protected] > Subject: Re: [Ntop] Can not monitor more than one netflow device > > I *think* you have to configure a different netflow virtual interface > (and udp port) for each netflow provider. Check the FAQ and man pages > to be certain. > > Gary > > > >>> [EMAIL PROTECTED] 4/20/2006 3:30:58 PM >>> > Hello, > > I've got ntop installed on a Red Hat Enterprise AS 3. ntop version is > 3.2, compiled from tgz file from sourceforge, only one interface eth0. > > I have started it with /usr/local/bin/ntop -L -u ntop -d, and we want > to monitor 2 netflow devices (Cisco 3845 and PacketShaper 6500, both > netflow v5). > > I added firstly the Cisco 3845, and ntop started to collect data and > draw nice graphs and statistics. > > However, after adding the second device (PacketShaper, both with the > same destination port udp/2055, only difference is local subnet) I have > noticed that ntop will not display any more info about Cisco. ntop now > only displays info and graphs about PacketShaper. > > Am I doing something wrong? Any misconfiguration? Any idea of what > might be happening? Any help will be appreciated :) > > Regards, > > Cesar > _________________________________________________________________ > Descarga gratis la Barra de Herramientas de MSN > http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www. hotmail.com&HL=LINKTAG1OPENINGTEXT_MSNBH____________________________________ ___________ > > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > _________________________________________________________________ Descarga gratis la Barra de Herramientas de MSN http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www. hotmail.com&HL=LINKTAG1OPENINGTEXT_MSNBH____________________________________ ___________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
