[Ntop] Netflow

[Luca Deri]

Corey
You need to enable the netflow plugin, create a virtual interface with destination port 9996 and switch the top web interface to the net flow interface. 

Luca
---
Luca Deri <deri at ntop.org>

Il giorno 12/ago/2010, alle ore 23.47, Cory Peterson <petecory at gmail.com> ha scritto:

> I am working on trying to compile 4.0 now.
> Will let you know how it goes.
> 
> Thanks!
> Cory
> 
> On Thu, Aug 12, 2010 at 3:41 PM, Gary Gatten <Ggatten at waddell.com> wrote:
> In the web GUI, “About, Configuration” will show you most everything related to the config.  Down at the bottom will be a link to a text version for even more detail.
> 
>  
> 
> I suspect you used a prebuilt package?  Perhaps from a source version that had some issues.  Assuming your flow exports are formatted correctly, ntop usually works without issue.  Are you able to fetch and compile the latest release?  I’m still on 3.4-pre3.  I intend to upgrade to v4.x soon in hopes to address a few bugs and get some new features – such as threshold alarms!
> 
>  
> 
> G
> 
>  
> 
>  
> 
> From: ntop-bounces at listgateway.unipi.it [mailto:ntop-bounces at listgateway.unipi.it] On Behalf Of Cory Peterson
> Sent: Thursday, August 12, 2010 4:18 PM
> To: ntop at unipi.it
> Subject: Re: [Ntop] Netflow
> 
>  
> 
> Linux Version:
> 
> Linux nistnetsrv 2.6.32-23-generic-pae #37-Ubuntu SMP Fri Jun 11 09:26:55 UTC 2010 i686 GNU/Linux
> 
>  
> 
> NTOP version:
> 
> 3.3
> 
>  
> 
> Not sure where to find the config file in Ubuntu, I look /var/lib/ntop/init.cfg but it only had 2 lines in it.
> 
>  
> 
>  
> 
>  
> 
> On Thu, Aug 12, 2010 at 10:35 AM, Gary Gatten <Ggatten at waddell.com> wrote:
> 
> Pls post more info; version, config, etc.
> 
>  
> 
> From: ntop-bounces at listgateway.unipi.it <ntop-bounces at listgateway.unipi.it>
> 
> To: ntop at unipi.it <ntop at unipi.it> 
> Sent: Thu Aug 12 10:23:47 2010
> Subject: Re: [Ntop] Netflow
> 
> Yes, I have also tried to start it with no physical nic.
> 
>  
> 
> ntop -u root -i none
> 
>  
> 
>  
> 
> -Cory
> 
>  
> 
> On Thu, Aug 12, 2010 at 9:22 AM, Gary Gatten <Ggatten at waddell.com> wrote:
> 
> Did you select the netflow nic so ntop will display that info? Else it (ntop reports) defaults to the real nic in the system.
> 
>  
> 
> From: ntop-bounces at listgateway.unipi.it <ntop-bounces at listgateway.unipi.it> 
> To: ntop at listgateway.unipi.it <ntop at listgateway.unipi.it> 
> Sent: Thu Aug 12 09:02:18 2010
> Subject: [Ntop] Netflow
> 
> Hello,
> 
>  
> 
> I have been trying to get netflow to work on NTOP. I have configured the router and can see netflow packets (using tcpdump) hitting the interface on my NTOP box. I am using port 9996 for Netflow and have configured that on both device. This is running on a Ubuntu box.
> 
>  
> 
> I am not sure what else to look at and can't seem to find much on this issue when googling.
> 
>  
> 
> Thanks!
> 
> Cory
> 
> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." 
> _______________________________________________
> Ntop mailing list
> Ntop at listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
> 
>  
> 
> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
> 
> 
> _______________________________________________
> Ntop mailing list
> Ntop at listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
> 
>  
> 
> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
> 
> _______________________________________________
> Ntop mailing list
> Ntop at listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
> 
> 
> _______________________________________________
> Ntop mailing list
> Ntop at listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listgateway.unipi.it/pipermail/ntop/attachments/20100813/cff473ab/attachment.htm>