You're missing route-cache flow on an interface - typically its on at least two. The "source" has nothing to do with what IF's data is collected on - only the source ip of the export packets.
________________________________ From: [email protected] To: [email protected] Sent: Tue Mar 31 20:02:56 2009 Subject: Re: [Ntop] Collecting packets Here is the config on the router router#enable Password:***** router#configure terminal router-(config)#interface ATM0/1 router-(config-if)#ip route-cache flow router-(config-if)#exit router-(config)#ip flow-export destination 216.128.224.80 2055 router-(config)#ip flow-export source (this is the interface we are collecting from example-FastEthernet 0/1) router-(config)#ip flow-export version 5 router- (config)#ip flow-cache timeout active 1 router-(config)#ip flow-cache timeout inactive 15 router-(config)#snmp-server ifindex persist router-(config)#^Z Netflow plug in NetFlow Device = NetFlow-device.2 Port = 2055 Virtual IP address = 10.7.83.0/255.255.255.0 No aggregation Terry Martin TimeData Corporation VP of Network Operation East Coast Number: 212-644-1600 X3 West Coast Number 503-678-2224 Cell: 503-318-8909 ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Tuesday, March 31, 2009 5:54 PM To: [email protected] Subject: Re: [Ntop] Collecting packets What's the conf of the netflow plugin / virtual interface? And what's the export conf on the ci$co? The plugin page will also have netflow stats as will the netflow interface summary page ________________________________ From: [email protected] To: [email protected] Sent: Tue Mar 31 19:44:03 2009 Subject: [Ntop] Collecting packets To all I have set up an NTOP probe to collect traffic from a Cisco 7206. I setup the plugin for Netflow on 2055 and when I look at the statistics on the “Summary traffic “ on eth0 I see the IOP traffic being registered on port 2055 and it is one of the highest used ports on the list. But when I change the port I am watching from eth0 to the netflow port nothing is collected. But I can see the packets come in on the NTOP collector using Wireshark (see attached snipit). I am not sure why this is not working. Anyone have any suggestions? I must be missing something simple Thanks in advance Terry Martin TimeData Corporation VP of Network Operation East Coast Number: 212-644-1600 X3 West Coast Number 503-678-2224 Cell: 503-318-8909 "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
