If it helps, netstat -nap | grep 9001 came back with four of these entries: 0.0.0.0:9001
Perhaps its not binding to a NIC at all? I didn't see a netflow come through using tcpdump - I'll need to investigate that utility a little more, since I didn't/don't know that it will show upd transactions. On 10/17/06, Gary Gatten <[EMAIL PROTECTED]> wrote:
You have multiple real interfaces and one netflow nic? I'm not sure which real nic/ip the virtual netflow nic will bind to. All of them maybe, or perhaps just the first one it finds. That's why netstat -a and sockstat -l will help determine if the netflow plugin process is running and listening on which ip and which port. Post the netflow plugin configs and I'll see if I can tell anything wrong. Also, run tcpdump, snoop, whatever and make sure your router(s) are sending netflow to your ntop box. Gary
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
