Just thought of something. When configuring the router you have enable flows on an interface. Somewhere, someplace I I saw that it was recommended you do this on the loopback device. Further down the road when you're configuring the router you have to provide a source - I used the interface closest to my ntop connection.
i'm thinking they either both need to be the loopback interface or the ethernet interface - you think? Also, how does this part of the configuration change what data you see - if it does? On 10/17/06, Gary Gatten <[EMAIL PROTECTED]> wrote:
tcpdump host (your router ip / netflow source) or tcpdump udp 9001 (or whatever netflow is using) I'd start with the first and see what is coming from your router. Maybe it's not sending to 9001? You should definitely see traffic from your routers if netflow is configured correctly there. Post those configs too, but make sure your route-cache is flow on the interfaces you want netflow info from. Gary
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
