Rai can you please check if with tcpdump you all the traffic you expect? I think this is the problem. Probably you need to disable the switch (see http://www.ntop.org/nprobe/how-to-build-a-100e-augmented-netflowipfix-probe-ubiquity/)
Regards Luca > On 02 Sep 2016, at 21:26, Rai Suraj <[email protected]> wrote: > > Hi, > > The internet interface is eth0. I tried it on eth0 but the traffic reported > is relatively light. For e.g. on my internal machine 192.168.1.10 I am > watching YouTube 4K video which should push at least 10 mbps traffic to > YouTube servers but I don’t see much change on the bandwidth meter (shows > about 300K). Mind you, some activity is being reported but not what I would > expected. > > Thanks > >> On 3 Sep 2016, at 3:19 AM, Luca Deri <[email protected] <mailto:[email protected]>> >> wrote: >> >> Rai >> the command should be correct. I cannot comment on -i switch0 if it’s the >> right interface, but I would suggest to do -i ethX where ethX is the >> internet interface. >> >> Please let us know if it works >> >> Regards Luca >> >>> On 02 Sep 2016, at 20:42, Rai Suraj <[email protected] >>> <mailto:[email protected]>> wrote: >>> >>> Hi, >>> >>> I have a 5 port POE Ubiquiti EdgeRouter. eth0 and eth1 are connected to >>> external ISPs and is configured in redundant setup with eth0 as primary. >>> eth2,3,4 are configured as a switch (router has hardware support for these >>> 3 ports) with interface switch0. >>> >>> I setup nprobe listening to either eth0 or switch0 but am not really seeing >>> the traffic I was expecting. For instance, I know I am browsing YouTube on >>> one of my internal machines connected via switch0 but ntopng hardly shows >>> any traffic going through. >>> >>> Any thoughts on what would be the best way to collect stats going through >>> this router on my network? I want to be in a position to monitor traffic >>> history across every device in my internal network. >>> >>> nprobe command: nprobe --zmq "tcp://*:5556 <tcp://*:5556>" -i switch0 -n >>> none >>> ntopng command: ntopng -i "tcp://192.168.1.1:5556 <tcp://192.168.1.1:5556>" >>> >>> Would appreciate any help/suggestions. >>> >>> Thanks >>> >>> _______________________________________________ >>> Ntop-misc mailing list >>> [email protected] <mailto:[email protected]> >>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >>> <http://listgateway.unipi.it/mailman/listinfo/ntop-misc> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] <mailto:[email protected]> >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
