Alek, Switches do not send all network traffic to all ports so nprobe does not get most of the traffic. You need to get the data somehow, for example from router flow export like NetFlow or sFlow, or use a tap or mirror port for your nprobe interface and get all the network packets going to it.
*Greg Eva* *[email protected] <[email protected]>* www.gE-volution.eu France : +33 4 81 68 09 64 Canada : +1 226 476 1192 iNum : +833 51 00 09 90 28 81 On 21 September 2014 20:11, Luca Deri <[email protected]> wrote: > Please read how port span or tap works. This is what you need > > Luca > > On 21 Sep 2014, at 19:47, alek markus <[email protected]> wrote: > > O.k sorry for the Misunderstanding > > My Ip Address of ntopng server : 10.11.32.1 > > my subnet mask is 24 > > Main router ip is : 10.11.32.253 (Deafult Gateway of entire network) > > where is my mistake in the config ? > > *ntopng -i tcp://127.0.0.1:5556 -m 10.11.32.0/24 <http://10.11.32.0/24>* > > *nprobe --zmq "tcp://*:5556" -i eth0 -n none -b 2* > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
