David
yes you can. When you want to do SPAN + collection you need to start two nprobe
instances both exporting to ELK.
So
nprobe -n none -i ethX … --elastic …
nprobe -n none -i none -3 … --elastic …
Regards Luca
> On 12 Jul 2018, at 05:51, David Kraut wrote:
>
> Is it possible to run nprobe and ntopng on the same box? If so, what is the
> correct config for Ubuntu 18 assuming I want to ingest both both SPAN and
> Netflow and ultimately send stale data to ELK (or similar) to maintain ~30
> day history. I'm able to get ntopng working and connect via port 3000, but
> when I try to install nprobe on the same box, I'm never able to get port 2055
> to show as listening via netstat.
>
> Thanks!
>
> ___
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
___
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc