Hi to all!
I'l trying to configure ntop/nprobe con collect informations on VoIP traffic.
A've some questions:
1. Do I need nprobe to obtain an advanced monitoring of VoIP records as descrived here (http://luca.ntop.org/VoIP.pdf) or is
enough to configure a cisco router to export "flow export ..." pointing to a server running ntop?
2. If I need nprobe, I've tested this solution:
a) voip server on Cisco router with port in span duplicating ALL the traffic to
a server with nprobe on eth1.
b) starting nprobe with this parameters:
./nprobe -i eth1 -n <ntop_server_ip>:2055 -U 257 -T "%LAST_SWITCHED %FIRST_SWITCHED %IPV4_SRC_ADDR %IPV4_DST_ADDR %IN_BYTES
%IN_PKTS %OUT_BYTES %SIP_CALL_ID %SIP_CALLING_PARTY %SIP_CALLED_PARTY %SIP_RTP_CODECS %SIP_RTP_SRC_PORT %SIP_RTP_DST_PORT
%RTP_FIRST_SSRC %RTP_IN_JITTER %RTP_OUT_PAYLOAD_TYPE %RTP_IN_MAX_DELTA %L4_SRC_PORT %L4_DST_PORT"
c) starting ntop on another server enabling the "NetFlow plugin" on port 2055.
Is the scenario correct?
3. Even if correct (please confirm) on the nprobe server, I cannot see on ntop any information about voip. I cannot see the "ntop:
VoIP Session Detail" or "ntop: Host Detail" (I'm missing these menus) like descrived in "Open Source VoIP Traffic Monitoring"
documentation of Luca Deri.
What I'm doing wrong?
Thank's
Simon
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
