Re: [Ntop-misc] n2disk

[Luca Deri]

Hi Mark,
we have fixed the dependency and a new package is currently being build (it 
will be available within 20 mins)

Regards Luca

> On 31 Dec 2015, at 04:03, Mark Stingley  wrote:
> 
> I attempted to install n2disk on an AMD64 Debian Jessie system via:
> 
> n2disk_2.3.151230-4473_amd64.deb
> 
> Installation failed with the following error:
> 
> n2disk depends on libnl1; however:
>  Package libnl1 is not installed.
> 
> Please note that libnl1 is no longer in distribution.  The only
> packages listed for libnl are in the "libnl-3" series.  libnl1 last
> appeared in the wheezy distribution.
> 
> I'm open to suggestions on how to proceed.
> 
> Thanks.
> 
> Mark
> ___
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

___
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

[Ntop-misc] PF_RING ZC with n2disk and ntopng

[Brandon Farmer]

Hi,

I'm a bit confused on how I use the ZC PF_RING drivers with n2disk and ntopng.

I've installed all of the latest stable packages from ntop.org.  When I first 
brought up the box, ingress traffic was going to n2disk and ntopng just fine, 
but the box was showing lots of drops in ifconfig.  I went into the nbox GUI 
under system>PF_RING and enabled the ZC ixgbe driver.  After rebooting, n2disk 
now showed a bunch of zc:eth interfaces.   So I went to Application>Cluster and 
clustered all of the zc:eth4 interfaces together, and created a new cluster 
with two applications.  I configured n2disk to use cluster_1_0, and it appears 
to be working, but ntopng isn't gathering any data, no matter if I set it to 
eth4, zc:eth4, or cluster_1_1.   Can someone help me understand what I'm 
missing?

Here are some details about my box:

[root@SAV-NBOX1 ntopng]# cat /proc/net/pf_ring/info
PF_RING Version  : 6.2.0 
(6.2.0-stable:c69bec0486fc2afc6f499659f680c37ef1c72026)
Total rings  : 20

Standard (non DNA/ZC) Options
Ring slots   : 4096
Slot version : 16
Capture TX   : No [RX only]
IP Defragment: No
Socket Mode  : Standard
Total plugins: 0
Cluster Fragment Queue   : 0
Cluster Fragment Discard : 0

[root@SAV-NBOX1 ntopng]# cat /proc/net/pf_ring/dev/eth4/info
Name:  eth4
Index: 8
Address:   5C:B9:01:96:49:64
Polling Mode:  NAPI/ZC
Type:  Ethernet
Family:Intel ixgbe 82599
Max # TX Queues:   16
# Used RX Queues:  16
Num RX Slots:  32768
Num TX Slots:  32768

Thanks,

Brandon
___
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Re: [Ntop-misc] nprobe support for Cisco WLC netflow export

[Luca Deri]

Hi Yasser,
please file an issue request on https://github.com/ntop/nProbe/issues, attach a 
pcap file (flows + templates) full packet size, and we’ll see what we can do.

Please also specify also the whole command line you have used to start nProbe

Thanks Luca

> On 29 Dec 2015, at 10:39, Yasser Slarmie  wrote:
> 
> Hello everyone
> 
> After reading through the following blog post:
> 
> http://mrncciew.com/2013/02/13/who-really-support-wlc-netflow/ 
> 
> 
> It seems that Cisco sends these unique fields in their Wireless LAN 
> Controller netflow v9 exports:
> 
> • applicationTag
> • ipDiffServCodePoint
> • octetDeltaCount
> • packetDeltaCount
> • postIpDiffServCodePoint
> • staIPv4Address
> • staMacAddress
> • wlanSSID
> • wtpMacAddress
> 
> How do I go about getting these fields incorporated into nprobe? Currently, 
> ntopng shows zero data for the received netflow packets coming from the WLC.
> 
> Regards,
> Yasser
> 
> ___
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it 
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc 
> 
___
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc