Hi Frederic, The latest ntopng dev build allows you to create virtual interfaces on the basis of the ingress flow interface. You just have to visit the preferences page (Expert View), tab "Network Interfaces", and enable "Ingress Flow Interfaces". This should do the trick.
Regards, Simone On Thu, Jan 12, 2017 at 2:06 PM, Frederic Hermann <fhe-n...@neptune.fr> wrote: > Hi guys, > > I have a running nprobe+ntopng server, collecting netflow from several > sources. > > My collectors are routers connected to different Peers / Transit providers > on different interfaces. > > Currently, each source send a global flow to my nprobe server, and each > nprobe instance expose data to ntopng using different ZMQ endpoints. > > So I have traffic statistics by router. > > Now, I would like to get statistics by peer/provider, and not just by > router. > So I would like to have have one zmq interface by peer/provider in ntopng. > > To achieve this, I need to be able to filter the collected flow using the > interface on the source router, but I cannot find the proper way to do > this, as it seems I cannot use BPF filters in collector mode. > > > Here is the way I try to make it : > > > Peer1;if1 -- zmq > localhost:5556 > \ / > \ > Router1 --- (netflow v5 udp:1234) ---> nprobe > ntopng > / \ > / > Peer2:if2 -- zmq > localhost;5557 > > > Do you know how I could achieve this ? > > Thaks & regards > > _______________________________________________ > Ntop-misc mailing list > Ntop-misc@listgateway.unipi.it > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >
_______________________________________________ Ntop-misc mailing list Ntop-misc@listgateway.unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop-misc