[Ntop] Ntop 3.3.9 + NetFlow: Local subnets missing
james.greenhalgh at gmail.com
Tue Feb 10 08:13:33 CET 2009
Many thanks to those who have participated in the developement of
Ntop. It is awesome.
I've been using Ntop(v3.3.9) + The NetFlow plugin(v4.1) for about a
week now. I'm using only the netflow interface and I've defined my
local subnets using --local-subnets. They appear under 'Local
Networks' in About->Show Configuration.
My problem is that under IP -> Summary -> Networks, there is no subnet
data displayed. It says "Statistics for all Networks. No Data To
Display (yet)". I see data in other sections of ntop that pertain to
those subnets so I think there should be data displayed.
I know that --local-subnets is used for determining pseudo-local
hosts, but am I right in thinking that it will determine which subnets
are displayed under IP->Summary->Networks?
Similarly, I've tried to define a host cluster using
Admin->Configure->Preferences. cluster.c9Internal=10.200.5.0/28. When
I look at IP -> Summary -> Host Clusters I see the same 'No Data To
Display' message displayed. Once again, there is definitely data
flowing to/from hosts in this cluster.
All other sections seem to be happily populated with data.
Here are the options used in my ntop.conf
I've specified a virtual address on the NetFlow interface, too. Also,
I compiled from source. Running on RedHat Enterprise 5 Linux.
I've looked all through the man-pages and doco I could find. I've also
skimmed over the last few months of this mailing list and can't seem
to find the same issue. There were a few posts in January from people
who didn't have *any* data from their NetFlow interface displaying. A
similarity I have with them is that my NetFlow traffic comes from a
7200 series Cisco router.
Once again, thanks all for Ntop. If anyone is kind enough to help me
out, many thanks in advance. :)
More information about the Ntop