OK, as I chew through this, I'm beginning to think that I want to build a separate path from NetFlow sender (agent) to nProbe receiver to NetFlow consumer (ntopng)L:
dc-a-rtr --> port 6343 --------> nprobe collector-port=6343 + zmq=tcp://127.0.0.1:5556 ------> ntopng -interface=tcp://127.0.0.1:5556 dc-b-rtr --> port 6344 --------> nprobe collector-port=6344 + zmq=tcp://127.0.0.1:5557 ------> ntopng -interface=tcp://127.0.0.1.5557 xyz --> port 6345 -----------> nprobe collector-port=6345 + zmq=tcp://127.0.0.1:5558 --------> ntopng -interface=tcp://127.0.0.1:5558 More generally, each NetFlow (sFlow in my case) sender uses a unique UDP port to send data to a unique instance of nprobe, which in turn communicates to ntopng via a unique TCP port. Am I on the right track? [This seems fragile to me: I must then maintain internal documentation on which sender uses which UDP port. And not scalable. But perhaps this is the current state of the art?] --sk
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
