I think aggregation is off by default, but even with it on ntop should
display something.  Aggregation is useful in certain environments, but
not ours, so I haven't messed with it.  "Host Clusters" is more useful
type of aggregation for me.  Not exactly what I want, but I'm hoping
it's easily tweaked.

Notice the "debug" options at the end of the netflow plugin config
page.  Last resort enable debug and see what's up.  Or, give me vty
access and I'll see if I can find anything.

Gary


>>> [EMAIL PROTECTED] 10/18/2006 6:32 AM >>>

On 17.10.2006, Brian Loe wrote:

> Reconfiguring the router did it - by that I mean its now exporting
> flows and "tcpdump -i eth2 -p udp -vv" shows netflow packets are
being
> recieved. Still, ntop isn't showing anything as yet..

I haven't been following this discussion from the beginning so I  
don't know for sure exactly what kind of problem(s) you're having.  
However, I too was frustrated by ntop not showing anything although  
it is receiving netflow packet. I finally fixed my problem by  
changing the Flow Aggregation Policy (in the Netflow plugin  
configuration) to "None (no aggregation)". I immediately started  
getting all sorts of information being reported. I now remember  
having messed around with this option a while back, not realizing  
what a detrimental affect it would have.

Maybe this hint will be of some help to you?

--
Matthew Wyneken
_______________________________________________
Ntop mailing list
[email protected] 
http://listgateway.unipi.it/mailman/listinfo/ntop

===========================================================================





"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to