[Ntop] 2 ntop processes each running netflow listening on sameport....
Ggatten at waddell.com
Tue Feb 12 21:21:26 CET 2008
If you can't change the udp port ntop listens on I'm not sure what to
do. I have a couple instances both listening to maybe... 8 - 10
different ports for different netflows. If there's nothing "requiring"
you to run multiple instances, don't do it.
If you can't change the netflow port the router sends to, MAYBE you
could do some NAT on the ntop box to make the ports unique before ntop
see the traffic? So router a.b.c.d:2055 doesn't get nat'd, but router
w.x.y.z:2055 get's nat'd to w.x.y.z:2056? This should work - might take
a loopback interface or something...
From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Sent: Tuesday, February 12, 2008 2:15 PM
To: ntop at listgateway.unipi.it
Subject: [Ntop] 2 ntop processes each running netflow listening on
Dear NTOP community,
I am running ntop3.2 on Fedora Core 6. I have two ntop processes
running using different config files and listening on different http
ports. One process is configured to listen on one ethernet card and the
other on another ethernet card. Each card has a separate network
spanned (mirrored) to it. This works great.
What I ran into is that I'm trying to do the same thing in another spot
on our network where I can't do a span port. So, instead, I feed the
ntop box flows from one of our Cisco routers to port 2055. This works
fine for one process, but when I start up the other - the first process
stops processing data. It looks like it's working, but none of the data
actually changes anymore - it's static from the time the other process
What appears to be happening is that the last netflow plugin to get
started trumps the previous one. Sending data from the router to two
different ports isn't an option in my environment :-( I have each
netflow plugin configured with a different device name and different
data directories. So, I don't think the conflict is in that part.
Thus, I'm wondering if there's anyway to get two ntop processes to
coexist... each using their netflow plugin and reading in netflow data
from the same port?
Thank you --Greg Redder
Colorado State University
Greg Redder Academic Computing & Networking
Colorado State University, ACNS Phone:(970)491-7222 FAX:
601 S. Howes, Room 625 E-mail: redder at yuma.colostate.edu
Fort Collins, CO 80523 PGP
Ntop mailing list
Ntop at unipi.it
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
More information about the Ntop