From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cesar Hernando
Sent: Friday, April 21, 2006 5:50 AM
To: [email protected]
Subject: RE: Re: [Ntop] Can not monitor more than one netflow device
Thanks for your reply
When I added the Cisco router I clicked in "Add Netflow Device", telling ntop to use port 2055 and Cisco's LAN subnet as the virtual netflow interface.
After that, I added the PacketShaper, clicking again in "Add netflow device", again port 2055 and using PacketShaper's LAN subnet as the virtual netflow interface.
I thought that if I wanted to monitor several devices I only needed to switch NIC, and that I could use the same port: I thought ntop would receive all traffic through port 2055 and would distinguish devices checking source IP address (thanks to virtual netflow interface).
After your replies, if I have understood properly, I need to use different UDP ports if I want to monitor these 2 devices as separated NICs, since I am interested in getting totally separated graphs/statistics for each device. Am I right?
I'll give it a try and will tell you if it works...
Regards,
Cesar
> From: [EMAIL PROTECTED]
> To: [email protected]
> Subject:
RE: Re: [Ntop] Can not monitor more than one netflow device
> Date: Thu,
20 Apr 2006 16:46:22 -0500
>
>
Yes. If you want separate virtual interfaces, they need to use unique port
>
#s.
>
>
I suspect that the code doesn't actually test if the inbound port # is
>
reused, but it won't work properly.
>
>
-----Burton
>
> -----Original Message-----
>
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
>
Gatten
>
Sent: Thursday, April 20, 2006 3:59 PM
>
To: [EMAIL PROTECTED]; [email protected]
>
Subject: RE: Re: [Ntop] Can not monitor more than one netflow device
>
>
It's been awhile since I looked at this, but I recall having to use a unique
>
port for each virtual interface? I could be wrong, it's just what I recall
>
and my memory seems a little broken these days. I'll take a closer look
>
tomorrow as well.
>
> Gary
>
>
>
>>> [EMAIL PROTECTED] 4/20/2006 3:53:21 PM >>>
>
Thanks for your quick reply...
>
>
I am already using different netflow virtual interfaces, that way ntop
>
should distinguish between traffic from Cisco and PacketShaper.
>
>
I have checked FAQ but found nothing about using different udp ports for
>
each provider. I'll give a try tomorrow, meanwhile more ideas are welcomed
>
:)
>
> Regards,
>
> Cesar
>
>
>
----------------------------------------
>
> Date: Thu, 20 Apr 2006 15:40:32 -0500
>
> From: [EMAIL PROTECTED]
>
> To: [EMAIL PROTECTED]; [email protected]
>
> Subject: Re: [Ntop] Can not monitor more than one netflow device
>
>
>
> I *think* you have to configure a different netflow virtual
>
interface
>
> (and udp port) for each netflow provider. Check the FAQ and man
>
pages
> > to be certain.
> >
>
> Gary
> >
> >
>
> >>> [EMAIL PROTECTED] 4/20/2006 3:30:58 PM >>>
>
> Hello,
> >
>
> I've got ntop installed on a Red Hat Enterprise AS 3. ntop version
>
is
>
> 3.2, compiled from tgz file from sourceforge, only one interface
>
eth0.
> >
>
> I have started it with /usr/local/bin/ntop -L -u ntop -d, and we
>
want
>
> to monitor 2 netflow devices (Cisco 3845 and PacketShaper 6500, both
>
> netflow v5).
> >
>
> I added firstly the Cisco 3845, and ntop started to collect data and
>
> draw nice graphs and statistics.
>
>
>
> However, after adding the second device (PacketShaper, both with the
>
> same destination port udp/2055, only difference is local subnet) I
>
have
>
> noticed that ntop will not display any more info about Cisco. ntop
>
now
>
> only displays info and graphs about PacketShaper.
>
>
>
> Am I doing something wrong? Any misconfiguration? Any idea of what
>
> might be happening? Any help will be appreciated :)
>
>
> > Regards,
> >
>
> Cesar
>
> _________________________________________________________________
>
> Descarga gratis la Barra de Herramientas de MSN
>
>
>
http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www.
>
hotmail.com&HL=LINKTAG1OPENINGTEXT_MSNBH____________________________________
>
___________
>
> >
>
> Ntop mailing list
> > [email protected]
>
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
> >
>
>
_________________________________________________________________
>
Descarga gratis la Barra de Herramientas de MSN
>
http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www.
>
hotmail.com&HL=LINKTAG1OPENINGTEXT_MSNBH____________________________________
>
___________
>
> Ntop mailing list
>
[email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
> _______________________________________________
>
Ntop mailing list
> [email protected]
>
http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
_______________________________________________
>
Ntop mailing list
> [email protected]
>
http://listgateway.unipi.it/mailman/listinfo/ntop
Tu horóscopo diario, semanal y gratuito. Cartas, tarot y predicciones en MSN Horóscopo
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
