Hi Farah, I have been wondering about the various ways of doing what you are describing as well. My understanding is that you have only a few options:
1/ Have the switch export some sort of flow which ntopng can receive and work with (NetFlow, sFlow, POSTFIX); the switch obviously needs to support this 2/ If the switch doesn't support exporting a flow, perhaps the router on the remote switch does and it could be used to get your flows to ntopng 3/ You need to install a remote probe, running nprobe on a remote system connected to a mirror port on this remote switch, which would send the flows in ZMQ interface to ntopng on your 192.168.1.169 NIC (it would obvious also need to have dual-NICs) You obviously need to be aware of probe placement, as the probe will only get the data which is flowing across it. Cheers, *Greg Eva* *[email protected] <[email protected]>* www.gE-volution.eu France : +33 4 81 68 09 64 Canada : +1 226 476 1192 iNum : +833 51 00 09 90 28 81 On 25 September 2014 15:13, Farah Braiteh (Student) <[email protected]> wrote: > Yes sure, the switch I'd like to connect to is obviously different than > the one that ntopng is connected to. I am sorry for the misunderstanding. > I wonder if you can propose a way that helps me to do so. > Thank you. > Regards, > Farah > ------------------------------ > *From:* [email protected] < > [email protected]> on behalf of Ramzi Abdallah < > [email protected]> > *Sent:* Thursday, September 25, 2014 12:38:08 PM > *To:* [email protected] > *Subject:* Re: [Ntop-misc] Problems in sending data using nprobe > > > Do you mean you want to want to connect nprobe to a mirrored port on a > remote switch other than the one you have ntopng connected to and makes it > log received packets to the ntopng server? > > > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Farah Braiteh > (Student) > *Sent:* Thursday, September 25, 2014 12:31 PM > *To:* [email protected] > *Subject:* [Ntop-misc] Problems in sending data using nprobe > > > > > > > > Helllo, > > > > The PC, where Ntopng is installed, is connected to two networks: > > 1. Monitoring network: connected to the switch where port mirroring is > > 2. Managing Network (My IP address is 192.168.1.169) > > > > *************** > * * Monitoring ************ > * *------------------> * Switch * > * Ntopng * (Network 1) ************ > * * (Port > mirroring) > * * > * * > * * Management; My IP: 192.168.1.169 > * *------------------> > * * (Network 2) > * * > *************** > > > The above network is working successfully; the data received by the switch > is collected by ntopng and can be seen. > > > > How can I send data from nprobe to the switch I have above, so that ntopng > can collect the data to be sent? > > > > Thank you. > > Regards, > > Farah > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
