Hello, I know I bug you a lot, but I need to check everything thorougly, so please forgive me :).
Now I am trying to mark interface flows with MAC addresses with following command line: /usr/local/bin/nprobe -n 80.245.176.15:9999 -i dna0 --in-iface-idx -1 --out-iface-idx -1 But in nfdump I get: root@saruman:/opt/nfsen/profiles-data/live/nprobe/2013/04/05# nfdump -r nfcapd.201304051550 -s inif Top 10 Input If ordered by flows: Date first seen Duration Proto Input If Flows(%) Packets(%) Bytes(%) pps bps bpp 2013-04-05 15:45:15.060 421.738 any 0 457740(100.0) 13.0 M(100.0) 9.7 G(100.0) 30881 184.8 M 747 Summary: total flows: 457740, total bytes: 9.7 G, total packets: 13.0 M, avg bps: 184.8 M, avg pps: 30881, avg bpp: 747 Time window: 2013-04-05 15:45:15 - 2013-04-05 15:52:16 Total flows processed: 457740, Blocks skipped: 0, Bytes read: 31127832 Sys: 0.176s flows/second: 2600632.9 Wall: 0.174s flows/second: 2627111.3 root@saruman:/opt/nfsen/profiles-data/live/nprobe/2013/04/05# nfdump -r nfcapd.201304051550 -s outif Top 10 Output If ordered by flows: Date first seen Duration Proto Output If Flows(%) Packets(%) Bytes(%) pps bps bpp 2013-04-05 15:45:15.060 421.738 any 0 457740(100.0) 13.0 M(100.0) 9.7 G(100.0) 30881 184.8 M 747 Summary: total flows: 457740, total bytes: 9.7 G, total packets: 13.0 M, avg bps: 184.8 M, avg pps: 30881, avg bpp: 747 Time window: 2013-04-05 15:45:15 - 2013-04-05 15:52:16 Total flows processed: 457740, Blocks skipped: 0, Bytes read: 31127832 Sys: 0.176s flows/second: 2600647.7 Wall: 0.173s flows/second: 2636781.5 So it doesn't mark flows with proper interface numbers. But if I use: /usr/local/bin/nprobe -n 80.245.176.15:9999 -i dna0 --vlanid-as-iface-idx outer or /usr/local/bin/nprobe -n 80.245.176.15:9999 -i dna0 --in-iface-idx 10 --out-iface-idx 20 It is marked OK. Any ideas? -- Michał Margula, [email protected], http://alchemyx.uznam.net.pl/ "W życiu piękne są tylko chwile" [Ryszard Riedel] _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
