I want ntop to process every packet it receives from sFlow.
I have sFlow working on my switches (configured to send 1 of 1024)
and ntop is receiving them, but it only actually processes 1 of 1024
packets. I have used sflowutils and sFlowTrend to verify that I am
getting lots of FLOWSAMPLE packets. Currently out of 1,029,778
recieved packets only 1005 have been processed. Which means I'm only
seeing 1 out of every 1048576 packets (1024 x 1024).
Under network interfaces label, I can verify that the sample rate of
the packets received is 1024 (again, this is what the switches are
configured to do). Is this value used to calculate how many packets
are processed? If so, can I set this value to 0 so that every packet
is processed? I noticed that when setting up a local network
interface, that sample rate is 0 and it processes 100% of packets
received.
I'm running ntop v3.2 using this configuration: ntop -d -L --user
ntop --db-file-path /var/ntop --interface none --use-syslog=local3 --
daemon
I made sure that the sFlow-device is selected in the Switch NIC page.
The switches are Foundry FastIron FESx448 (2) and FES9604 (1) with
all ports sending sFlow every 1024 packets (about 200 ports)
I'll happily provide more information if necessary. Thanks,
Daniel
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
