Yes, I do have the virtual netflow device setup and the NTOP server is
listening on udp 2055
However I did not do the SWITCH NIC on the web.  I just did that (thanks for
that) but I am not seeing any data now on that I device.

Also,  what I read / understand regarding the IP network in the Virtual
Interface settings is that the IP network is only used to distinguish what
is local and what is remote, whereas the black and white list tells NTOP
what to store and not to store (I have these both blank so it so store all
info). Please correct me if I am wrong.

Thanks for the reply.
-Rob




From: Gary Gatten <[EMAIL PROTECTED]>
Reply-To: <[email protected]>
Date: Wed, 28 Mar 2007 17:20:33 -0400
To: <[email protected]>
Conversation: [Ntop] NTOP only seeing data from host running NTOP
Subject: RE: [Ntop] NTOP only seeing data from host running NTOP

Did you configure your virtual netflow interface in ntop?  Did you
"switch nic" and select the virtual netflow interface for your web
views?  Do a netstat -a, or sockstat -l and see if there's a ntop
process listening on the udp port configured for netflow.

Gary


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Robert Geller
Sent: Wednesday, March 28, 2007 4:18 PM
To: [email protected]
Subject: [Ntop] NTOP only seeing data from host running NTOP

Just recently installed 3.2.  I have my Netflow configured, and I have
my
routers configure to export.  The routers are showing flows being
exported,
nothing being dropped.  I am seeing data in NTOP, however it appears to
only
contain traffic that includes the host running NTOP only, which is
mainly
all my SNMP traffic.

I do have the ip route-cache flow configured on my interfaces, and CEF
is
enabled.  The routers are showing flows.

Not sure why I am not seeing other flows.  Any suggestions?

Thanks,

-Rob

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

===========================================================================





"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop



_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to