Heh ok I restarted with the following command line:
ntop -u root -m (allmy ip's)
All traffic came back and is being reported but still no active
sessions.
Of note on the plugins I have the following enabled and configured:
cPacket No
LastSeen Yes
icmpWatch Yes
NetFlow Yes
PDAPlugin No
Remoteplugin No
rrdPlugin Yes
sFlow No
David Kent
Wireless Network Administrator
Succeed.Net
Bus: (530) 674-4200 ext160
Fax: (530) 674-4329
8:00AM to 5:00PM PST M-F
-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of
David Kent
Sent: Tuesday, January 20, 2009 4:26 PM
To: [email protected]
Subject: Re: [Ntop] NTOP Active UDP.TCP Connection
OK I did that and now I am getting no traffic showing at all. :)
David Kent
Wireless Network Administrator
Succeed.Net
Bus: (530) 674-4200 ext160
Fax: (530) 674-4329
8:00AM to 5:00PM PST M-F
-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of
Mel Beckman
Sent: Tuesday, January 20, 2009 4:18 PM
To: [email protected]
Subject: Re: [Ntop] NTOP Active UDP.TCP Connection
Try adding the --no-mac option on the ntop command line. I have that on
mine and I think that helped.
-mel
________________________________________
From: [email protected] [[email protected]] On Behalf Of David
Kent [[email protected]]
Sent: Tuesday, January 20, 2009 3:33 PM
To: [email protected]
Subject: Re: [Ntop] NTOP Active UDP.TCP Connection
Yeah Netflow Nic is active, I am collecting data, somewhat. The only
thing that isn't tracking right now is the active sessions. I actually
have only been able to get them going on accident on a couple occasions
but usually they don't show up.
David Kent
Wireless Network Administrator
Succeed.Net
Bus: (530) 674-4200 ext160
Fax: (530) 674-4329
8:00AM to 5:00PM PST M-F
-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of
Mel Beckman
Sent: Tuesday, January 20, 2009 3:30 PM
To: [email protected]
Subject: Re: [Ntop] NTOP Active UDP.TCP Connection
The garbage characters thing is a known bug; I get that too. I just
avoid updating the addresses on the page and use the command options
instead. The most common reasons for not receiving netflow data is
failure to select the Netflow virtual NIC in the Web interface (e.g.,
change "eth0" or whatever to "netflow". ) Did you do that?
-mel
________________________________________
From: [email protected] [[email protected]] On Behalf Of David
Kent [[email protected]]
Sent: Tuesday, January 20, 2009 2:59 PM
To: [email protected]
Subject: [Ntop] NTOP Active UDP.TCP Connection
Have NTOP installed on a Centos 5 box. Have it set and receiving
netlflow data. Thanks for any help.
I have set the -m command in the web interface with the local subnet for
the machine.
Two things happen after a restart:
1. There is still no active udp/tcp sessions logged on the
specific pages.
2. When I go back into the webinterface startup options the the ip
info is not there and only shows some garbage characters:
[cid:[email protected]]
David Kent
Wireless Network Administrator
Succeed.Net
Bus: (530) 674-4200 ext160
Fax: (530) 674-4329
8:00AM to 5:00PM PST M-F
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
