[Ntop] No data in Netflow on FreeBSD 7.0

[Gary Gatten]

Typically you need to "export" from at least two interfaces, unless your IOS supports "ip flow ingress" and "ip flow egress" on the same interface? 

Network load is "accurate", although it doesn't distinguish between Tx and Rx :(

----- Original Message -----
From: ntop-bounces at listgateway.unipi.it <ntop-bounces at listgateway.unipi.it>
To: ntop at unipi.it <ntop at unipi.it>
Sent: Fri Apr 30 11:28:25 2010
Subject: Re: [Ntop] No data in Netflow on FreeBSD 7.0

Gary Gatten wrote:
> I noticed something similar re the admin login.  Try using admin for the pw, or ntop or something...
>   

yup, admin:admin worked

> As for graph confidence, some are whacked for sure, but throughput is pretty accurate.  Make sure your netflow confs "see" all the traffic! Usually this is misconfigured and ntop only sees half the conversation.  Timers should be 10secs for inactive and 60secs for active IMO.
>   

Exporting device is a 1Fe (2 vlan sub int), 2 x T1 (in a multilink) 
26xx. I'm only exporting the Fe (on the base interface, not subs), since 
the multilink this is also natting, and the multilink is the nat outside.

Occurs to me I misstated - it's not the throughput graph I'm thinking 
of, but the Summary:Network Load

> ----- Original Message -----
> From: ntop-bounces at listgateway.unipi.it <ntop-bounces at listgateway.unipi.it>
> To: ntop at unipi.it <ntop at unipi.it>
> Sent: Fri Apr 30 11:08:18 2010
> Subject: Re: [Ntop] No data in Netflow on FreeBSD 7.0
>
> Holy Moly - svn (4253) build works! Or, at least I have data on both 
> local and Netflow interfaces. Still looking at the data to see if it 
> makes sense.
>
> I have noticed before that the Throughput numbers don't match our Cacti 
> graphs even a little (800k vs 3M). Not ready to chase that quite yet. I 
> suppose cache timeout active on the router might be related.
>
> One odd thing I've bumped into with the svn checkout is I seem to lose 
> the ability to login to admin. When I first start, I get the password 
> set prompts, and am then able to login. Then if I shutdown ntop and 
> restart (doesn't matter whether daemon mode or interactive), I then 
> can't get past the login to get into the admin functions. I realize this 
> is dev code, so this is just a note...
>
> thank you again for your time
>
> tim
>
> Gary Gatten wrote:
>   
>> I would try svn, I can't say what's actually in the tar.  Agree with you on ports.  Makes me long for the day of static/monolythic exe's. Can't understand why some developers insist on using a library with two dozen other dependancies for one simple function!  But I digress...
>>
>>     
<early bit of thread snipped, cause even though I'm a heretic about top 
posting, these things still don't need to be sooo long...>
_______________________________________________
Ntop mailing list
Ntop at listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop