Ok... So I tried this "real quick" on my SRX with ntop 4.0.3, I have not captured the packets output by the SRX (can't do that easily right now), but when I configured ntop to use sflow to receive the SRX output it REALLY didn't like it - spewed many errors and then crashed.
I then configured netflow to receive the SRX output and it SEEMS OK, but of course there's the whole sampling / scaling issue. I'll post a couple new threads and see what happens G ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Wednesday, June 15, 2011 5:32 PM To: '[email protected]' Subject: Re: [Ntop] SGG Juniper with Ntop Juniper calls it j-flow. I *think* it's sampled netflow but not sure. There is tons of info on the web though. I plan to light this in my SRX soon as well. Of course you can always mirror the switch port the firewall is connected to. From: Esteban Torres RodrÃguez [mailto:[email protected]] Sent: Wednesday, June 15, 2011 04:56 PM To: [email protected] <[email protected]> Subject: [Ntop] SGG Juniper with Ntop I need information on how I can monitor the traffic of my SGG 550 Juniper with Ntop. sFlow perhaps? I tried Ntop in my squid, but I want to monitor traffic to my firewall. "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
