| Thought that might be the case with the port but since I was having trouble wanted to check.
Seems my problem may not be related to bridges on the same subnet. Late last night I set one flow for one of the tower gateway router (20). Watched that run and it reported correctly, global traffic, IPs running through it etc.
I then set a second flow for a tower AP bridge on a completely different tower/subnet (21). Ntop began reporting that (21), global traffic graph is empty. Other graphs are on that page are populated. Summary hosts reports IPs for that subnet. Switching to the first nic (20) i created, the global traffic is empty It appears that the graphs below are populating, graphs are different from 21. Hosts is empty as are any other stats pertaining to IPs/hosts.
I entered each using the IP/mask of the interface facing the Ntop server or of course the bridge ip. Both of these are several routers/subnets away from the server. Both are accessible from the Ntop server as shown by individual stats.
So it seems that anytime I add more than one nic in netflow, I loose the stats of the others. Perhaps I am not entering the info correctly?
Thanks,
Terri Kelley Network Engineer 254-697-6710
This email message is intended only for the named recipient(s) above, andmay contain, together with any attachment(s), confidential information that is privileged. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, copying or distribution of this message and any attachment(s) is strictly prohibited.
On Aug 13, 2008, at 1:37 AM, Yuri Francalacci wrote: On 08/13/2008 02:58 AM, Terri Kelley wrote: New to ntop and netflow. Yes another one.
Anyway, I have a couple of questions as I try and get this running.
First, does each router that I receive netflow from use a different
port?
I set the second one up tonight and am not getting any thing from it. Looking at the router, flows have stopped.
No, you could configure all the routers to send toward the same ip/port
Second, we are a wireless ISP and I am wanting to monitor each access
point on a tower. The 3 access points (sectors) are configured as
bridges with an assigned private space IP address. These are bridges
between the customer's cpe and the gateway and the gateway has a primary
and secondary address on it. One is the private space address and the
other is the public space in the same subnet as the customer's
equipment. Rather than monitor the gateway router, I would like to
monitor the three APs separately. But this doesn't seem to work. The way
I have tried it is to enter the three sectors as netflow devices, same
port (one of the reasons for the above question), IP address of 10.x.x.1
or 2 or 3, same subnet. On the bridge, I set the interface as the bridge
interface. I receive info from only one of the sectors. So, how do I set
this up so I can see info from the three sectors?
If your bridge could export data as netflow you are running in the right way. Just for debugging I'd check if netwflows are really exported even from the other 2 devices that they are not correctly working. For example you could set an host on the same network of the bridge, export netflows toward that host and check with a sniffer what's happening. This is just an idea. Yuri
Thanks,
Terri Kelley
Network Engineer
254-697-6710
This email message is intended only for the named recipient(s) above, and
may contain, together with any attachment(s), confidential information that
is privileged. If you are not the intended recipient, be advised that you
have received this email in error and that any use, dissemination,
forwarding, printing, copying or distribution of this message and any
attachment(s) is strictly prohibited.
------------------------------------------------------------------------
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
-- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Yuri Francalacci E-Mail: [EMAIL PROTECTED] Internet: http://www.ntop.org/*** Esse Quam Videri -- To Be, Rather Than To Seem *** -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= _______________________________________________ Ntop-misc mailing list [email protected]http://listgateway.unipi.it/mailman/listinfo/ntop-misc
|
