I only just recently even heard of these routers so can't help much. With Cisco routers netflow only counts traffic..... $hit, now I forget! It either counts traffic Tx or Rx (from the Router interface perspective), but not both. Later releases of IOS allow you to count both directions on one interface. Ie: If a router interface counts traffic it Tx's - it will be Rx traffic from the client perspective.
nTop is most likely working correctly. Regardless what platform, OS, sflow/netflow, etc. - you have to understand how traffic flow in your net and configure netflow accordingly. It's sometimes a challenge to count all the traffic without missing some or counting it multiple times. On a BASIC example with a single router with two interfaces (public and private) netflow needs to be enabled on both interfaces, UNLESS one of the interfaces supports and is configured to count ingress and egress traffic. Make sense? HTH G ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Wednesday, June 10, 2009 2:20 PM To: [email protected] Subject: [Ntop] Ntop problems with TrafficFlow Greetings list, I am having difficulty getting Ntop to work with a MikroTik router (v 3.23). I have set up TrafficFlow to send information to my Ntop (v 3.3.8) box, and for the most part everything works fine. However, all network statistics reported by Ntop only have entries for traffic received by each host - all outgoing traffic stats are 0. Also, it seems that the traffic Ntop reports as "received" is actually traffic sent by the individual hosts. I've tried sending flows (both v5 and v9) from the inside interface of the router, the outside interface, and both, but the traffic stats never seem to agree with what is actually happening. I'm slightly confused as to what (if anything) I've misconfigured. There are very few configuration options available to me through the TrafficFlow interface, so I believe the problem lies in an Ntop configuration setting somewhere. I would greatly appreciate any help that the list has to offer. Thanks. <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
