It goes in spurts - sometimes it's great, other times it $ucks. I think the more experienced people get tired of newbies asking the same basic questions for the millionth time. The FAQ isn't perfect, but it answers most of the basic questions. It's unfortunate cause I think nTop has potential to move from a good tool to a truly exceptional one, but without more experienced and active support and end users it will be tough.
G ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Geller Sent: Wednesday, March 28, 2007 5:29 PM To: [email protected] Subject: Re: [Ntop] NTOP only seeing data from host running NTOP I had a typo in my router config for export port. I have been staring at xterms too long today... Thanks for all the replies. BTW...how active is this list? -R ________________________________ From: Gary Gatten <[EMAIL PROTECTED]> Reply-To: <[email protected]> Date: Wed, 28 Mar 2007 18:16:20 -0400 To: <[email protected]> Conversation: [Ntop] NTOP only seeing data from host running NTOP Subject: RE: [Ntop] NTOP only seeing data from host running NTOP What are the timeout settings on your netflow exports? I set mine as low as possible to get the most real-time data. If you're sending flows over limited bandwidth you may want to use higher timeouts. Also, if you click: Plugins>Netflow>Statistics, see anything that doesn't look right? Lastly, do tcpdump or whatever and make sure your ntop box is actually receiving the 2055 traffic. Could it be clocked by an ACL or firewall somewhere? Many people have had a HARD time getting netflow to work, but it was super easy for me - no problems at all. Not sure why it works so easy for some and is such a PITA for others. I'm gone for today, can help tomorrow if still needed. Gary ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> On Behalf Of Robert Geller Sent: Wednesday, March 28, 2007 4:42 PM To: [email protected] Subject: Re: [Ntop] NTOP only seeing data from host running NTOP Yes, I do have the virtual netflow device setup and the NTOP server is listening on udp 2055 However I did not do the SWITCH NIC on the web. I just did that (thanks for that) but I am not seeing any data now on that I device. Also, what I read / understand regarding the IP network in the Virtual Interface settings is that the IP network is only used to distinguish what is local and what is remote, whereas the black and white list tells NTOP what to store and not to store (I have these both blank so it so store all info). Please correct me if I am wrong. Thanks for the reply. -Rob ________________________________ From: Gary Gatten <[EMAIL PROTECTED]> Reply-To: <[email protected]> Date: Wed, 28 Mar 2007 17:20:33 -0400 To: <[email protected]> Conversation: [Ntop] NTOP only seeing data from host running NTOP Subject: RE: [Ntop] NTOP only seeing data from host running NTOP Did you configure your virtual netflow interface in ntop? Did you "switch nic" and select the virtual netflow interface for your web views? Do a netstat -a, or sockstat -l and see if there's a ntop process listening on the udp port configured for netflow. Gary -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> <mailto:[EMAIL PROTECTED]> <mailto:[EMAIL PROTECTED]> On Behalf Of Robert Geller Sent: Wednesday, March 28, 2007 4:18 PM To: [email protected] Subject: [Ntop] NTOP only seeing data from host running NTOP Just recently installed 3.2. I have my Netflow configured, and I have my routers configure to export. The routers are showing flows being exported, nothing being dropped. I am seeing data in NTOP, however it appears to only contain traffic that includes the host running NTOP only, which is mainly all my SNMP traffic. I do have the ip route-cache flow configured on my interfaces, and CEF is enabled. The routers are showing flows. Not sure why I am not seeing other flows. Any suggestions? Thanks, -Rob _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop ======================================================================== === "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop ======================================================================== === "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." ________________________________ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop =========================================================================== "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
