I'm embarrassed to say I pulled a Loser Novice move on this one. Seems somewhere along the release path an option was added to the Netflow Plugin interface config. Guess what it's called? It's pretty cryptic, "Enable Session Handling". As cryptic as it is, I took a chance and sure enough it works! Who ever woulda guessed that an option called "Enable Session Handling" would enable tracking/reporting of tcp/udp sessions..... And yes, I'm being sarcastic!
Good option to add this switch in the GUI, but MAYBE make it default to "Enabled"? Just a thought! :-) Off to more testing!!! TIA! Gary ________________________________ From: Gary Gatten Sent: Friday, June 12, 2009 11:10 AM To: 'ntop@unipi.it'; 'ntop-...@unipi.it' Subject: RE: [Ntop] tcp/udp active sessions not working Anyone have any idea where to start on this? I still have old 3.2 source so I guess I could try to compile it and see what happens... ________________________________ From: Gary Gatten Sent: Thursday, June 11, 2009 6:41 PM To: 'ntop@unipi.it'; ntop-...@unipi.it Subject: RE: [Ntop] tcp/udp active sessions not working OK - bounced ntop and went to a pretty basic config... Sessions ARE working on the "real" NIC, however - NOT working on Netflow. My Netflow source is a Cisco 6509 Sup 720 PFC3. I've been using netflow on it for about a year exporting to nTop 3.2.x with no problems. All I did was change the export destination. Still using v5 records. Any help would be greatly appreciated! TIA! Gary PS: nTop segfaults when trying to update rrd config. Also won't start is a daemon on Solaris - but I think that might be a Solaris thing? I'll keep track of issues as I go along and submit an "all inclusive" bug report - are I'll at least try to batch it instead of one problem at a time! ________________________________ From: ntop-boun...@unipi.it [mailto:ntop-boun...@unipi.it] On Behalf Of Gary Gatten Sent: Thursday, June 11, 2009 5:39 PM To: ntop@unipi.it; ntop-...@unipi.it Subject: [Ntop] tcp/udp active sessions not working Hello, I recently got 3.3.10 "working" on Solaris 10 x86 and I'm trying to validate functionality and what not. So far the only thing obvious is my lack of session info. I tried the real NIC and netflow device, nothing - "no data to display (yet)" It's getting flow info and displays all other info, from what I can tell just no session info. I don't have session tracking disabled. Any suggestions? TIA! Gary "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop