Also, try running as root to rule out perms and maybe start with -t 5 and hope to get some useful messages in the log.
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Thursday, April 29, 2010 4:58 PM To: '[email protected]' Subject: Re: [Ntop] No data in Netflow on FreeBSD 7.0 Sounds like you tried most everything. What does "Plugins > Netflow > Statistics" show? Also, have you "Selected" the interface? "Admin > Switch NIC" and actually choose your netflow interface? G -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Tim Palmer Sent: Thursday, April 29, 2010 4:34 PM To: [email protected] Subject: [Ntop] No data in Netflow on FreeBSD 7.0 Good Day, I'm trying to get ntop working on a FreeBSD 7.0 amd64 box. I've had problems compiling 3.3.10, so tried 3.4pre3. I'm only interested in seeing data on a NetFlow interface. Nothing local is needed. However, I'm seeing similar behavior on eth0, only the Traffic Statistics table on the Summary Traffic page show very many packets dropped by libpcap. Compile and installation work fine. Ntop starts fine, web interface is fully functional. Netflow plugin is enabled and active. But there is only one packet shown for the NetFlow device, no packets dropped by ntop. I *believe* I've tried all ip address configuration options. Most other settings are default. Running in daemon mode does not produce any warnings on the console. Listen port is not default, and I've configured in the web UI, not spec started with {prefix}/bin/ntop -w 81 -u ntop -L -d tcpdump shows data coming in on the port I'm expecting it. Ethereal confirms they are legit netflow/cflow packets. sockstat shows ntop listening on the udp4 port expected. disabling ipfw doesn't help. Files are created in {prefix}/var/ntop/rrd/interfaces/NetFlow-device.2. They are being updated, but only with NANs or 0.000 entries. Netflow statistics page in the web UI shows just the one packet, 56bytes. No dropped flows or other problems. We prefer to compile from source, so haven't tried the port yet. rrdtool is 1.4, compiled from source. Cacti is also on this box, and has no problem w/ rrdtool. perl is 5.10.0 flow-capture is also in use on this box (for other devices, on other ports) and is working properly. I'm at a loss. If there's more information I can provide, I am most happy to do so. Kernel is custom. I have not yet tried with GENERIC, but try that next. FreeBSD xxx.xxx.xxx 7.0-RELEASE-p12 FreeBSD 7.0-RELEASE-p12 #0: Wed Apr 28 17:46:20 EDT 2010 [email protected]:/usr/obj/usr/src/sys/NETMON amd64 Thank you very much for your time. I'm sort of hoping this is just something stupid I'm missing. Tim Palmer _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
