Is v4 working or do you have the same symptoms? Do you have "Secure Linux" enabled, or iptables / some other host based firewall? I don't recall where tcpdump sits in the stack relative to iptables, so just make sure all the ntop threads are actually running (compare init info in log to output in top) AND nothing is blocking incoming traffic to those threads.
Start ntop with -t 5 and check the log for info. G ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Cory Peterson Sent: Friday, August 13, 2010 4:32 PM To: [email protected] Subject: Re: [Ntop] Netflow Hello Luca, I have tried that but for some reason I am still not seeing any netflow information. I can see the packets coming in to the box on tcpdump. Cory On Fri, Aug 13, 2010 at 12:23 AM, Luca Deri <[email protected]<mailto:[email protected]>> wrote: Corey You need to enable the netflow plugin, create a virtual interface with destination port 9996 and switch the top web interface to the net flow interface. Luca --- Luca Deri <[email protected]<mailto:[email protected]>> Il giorno 12/ago/2010, alle ore 23.47, Cory Peterson <[email protected]<mailto:[email protected]>> ha scritto: I am working on trying to compile 4.0 now. Will let you know how it goes. Thanks! Cory On Thu, Aug 12, 2010 at 3:41 PM, Gary Gatten <<mailto:[email protected]>[email protected]<mailto:[email protected]>> wrote: In the web GUI, "About, Configuration" will show you most everything related to the config. Down at the bottom will be a link to a text version for even more detail. I suspect you used a prebuilt package? Perhaps from a source version that had some issues. Assuming your flow exports are formatted correctly, ntop usually works without issue. Are you able to fetch and compile the latest release? I'm still on 3.4-pre3. I intend to upgrade to v4.x soon in hopes to address a few bugs and get some new features - such as threshold alarms! G ________________________________ From: <mailto:[email protected]> [email protected]<mailto:[email protected]> [mailto:<mailto:[email protected]>[email protected]<mailto:[email protected]>] On Behalf Of Cory Peterson Sent: Thursday, August 12, 2010 4:18 PM To: <mailto:[email protected]> [email protected]<mailto:[email protected]> Subject: Re: [Ntop] Netflow Linux Version: Linux nistnetsrv 2.6.32-23-generic-pae #37-Ubuntu SMP Fri Jun 11 09:26:55 UTC 2010 i686 GNU/Linux NTOP version: 3.3 Not sure where to find the config file in Ubuntu, I look /var/lib/ntop/init.cfg but it only had 2 lines in it. On Thu, Aug 12, 2010 at 10:35 AM, Gary Gatten <<mailto:[email protected]>[email protected]<mailto:[email protected]>> wrote: Pls post more info; version, config, etc. ________________________________ From: <mailto:[email protected]> [email protected]<mailto:[email protected]> <<mailto:[email protected]>[email protected]<mailto:[email protected]>> To: <mailto:[email protected]> [email protected]<mailto:[email protected]> <<mailto:[email protected]>[email protected]<mailto:[email protected]>> Sent: Thu Aug 12 10:23:47 2010 Subject: Re: [Ntop] Netflow Yes, I have also tried to start it with no physical nic. ntop -u root -i none -Cory On Thu, Aug 12, 2010 at 9:22 AM, Gary Gatten <<mailto:[email protected]>[email protected]<mailto:[email protected]>> wrote: Did you select the netflow nic so ntop will display that info? Else it (ntop reports) defaults to the real nic in the system. ________________________________ From: <mailto:[email protected]> [email protected]<mailto:[email protected]> <<mailto:[email protected]>[email protected]<mailto:[email protected]>> To: <mailto:[email protected]> [email protected]<mailto:[email protected]> <<mailto:[email protected]>[email protected]<mailto:[email protected]>> Sent: Thu Aug 12 09:02:18 2010 Subject: [Ntop] Netflow Hello, I have been trying to get netflow to work on NTOP. I have configured the router and can see netflow packets (using tcpdump) hitting the interface on my NTOP box. I am using port 9996 for Netflow and have configured that on both device. This is running on a Ubuntu box. I am not sure what else to look at and can't seem to find much on this issue when googling. Thanks! Cory "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list <mailto:[email protected]>[email protected]<mailto:[email protected]> <http://listgateway.unipi.it/mailman/listinfo/ntop>http://listgateway.unipi.it/mailman/listinfo/ntop "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list <mailto:[email protected]>[email protected]<mailto:[email protected]> <http://listgateway.unipi.it/mailman/listinfo/ntop>http://listgateway.unipi.it/mailman/listinfo/ntop "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list <mailto:[email protected]>[email protected]<mailto:[email protected]> <http://listgateway.unipi.it/mailman/listinfo/ntop>http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
