There's nothing in nTop that would prevent this from working. I use netflow exclusively and it does well. Can you post some nTop configs pertaining to your netflow virtual interfaces? Also the args on the ntop startup.
G ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Terri Kelley Sent: Tuesday, August 19, 2008 10:23 AM To: [email protected]; [EMAIL PROTECTED] Subject: Re: [Ntop] ntop with netflow on bridges Yuri, I just started with ntop on this network so this is my initial config. I chose a tower and started there. I would like to monitor the three APs divided which will help in diagnosing problems per AP. I tried one AP first to make sure I would get data. That worked. I tried adding the other two, no data on two, data on one. I tried one AP on that tower and one on another tower. That worked. Seems the problem is around the three bridged APs on same tower, same subnet. I just looked at my post from another list and here are the contents from it: Seems my problem may not be related to bridges on the same subnet. Late last night I set one flow for one of the tower gateway router (20). Watched that run and it reported correctly, global traffic, IPs running through it etc. I then set a second flow for a tower AP bridge on a completely different tower/subnet (21). Ntop began reporting that (21), global traffic graph is empty. Other graphs are on that page are populated. Summary hosts reports IPs for that subnet. Switching to the first nic (20) i created, the global traffic is empty It appears that the graphs below are populating, graphs are different from 21. Hosts is empty as are any other stats pertaining to IPs/hosts. I entered each using the IP/mask of the interface facing the Ntop server or of course the bridge ip. Both of these are several routers/subnets away from the server. Both are accessible from the Ntop server as shown by individual stats. So it seems that anytime I add more than one nic in netflow, I loose the stats of the others. Perhaps I am not entering the info correctly? thanks Terri Kelley Network Engineer 254-697-6710 This email message is intended only for the named recipient(s) above, and may contain, together with any attachment(s), confidential information that is privileged. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, copying or distribution of this message and any attachment(s) is strictly prohibited. On Aug 19, 2008, at 10:08 AM, Yuri Francalacci wrote: How many netflow device have you defined in ntop config? do you want to monitor your network divided per AP or you need the traffic merged together? Yuri On 08/19/2008 05:01 PM, Terri Kelley wrote: I haven't been able to get this to work and have asked this on the other mail list but there doesn't seem to be much activity there. Basically, I have three wireless access points on a tower which are bridged down to a backhaul router. The router, has a private and public ip. Bridged APs are on the private subnet. Customers off of the APs are on the public space IPs. I want to monitor the customer traffic through the bridged APs. I set up netflow on the bridges then added the netflow device in ntop. If I set only one of them, I get info. If I set the other two, I only receive info on one of the three. Any way around this so I can see traffic through the individual APs? Thanks, Terri Kelley Network Engineer 254-697-6710 This email message is intended only for the named recipient(s) above, and may contain, together with any attachment(s), confidential information that is privileged. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, copying or distribution of this message and any attachment(s) is strictly prohibited. ------------------------------------------------------------------------ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Yuri Francalacci E-Mail: [EMAIL PROTECTED] Internet: http://www.ntop.org/ *** Esse Quam Videri -- To Be, Rather Than To Seem *** -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
<<image001.jpg>>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
