I know this will sound basic, but did you "switch NIC" in the "Admin" tools and 
select your netflow interface?

What if you view the netflow statistics? Anything interesting there?

When using v9 there has been some issues with templates.  Can you try v5 and 
see if that works?

G


-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of David Meier
Sent: Monday, August 01, 2011 3:07 PM
To: [email protected]
Subject: [Ntop] Ntop & v9 Netflow

I'm currently trying to deploy some Ntop boxes which will ultimately be Netflow 
v9 collectors.  I have two interfaces on each box; one is used for SSH 
management / Ntop web interface and the other is a specialized interface to act 
as the Netflow 'sink'.

The problem I'm running into is that the netflow seems to be getting to the 
'sink' interface (if I tcpdump it out to pcap I see that it's Netflow v9 
records), however nothing ever shows up in Ntop even though I have the Netflow 
plugin configured.  I've tried turning debug on (for the plugin) but I don't 
see any additional information in the log.

Is there any better way to run the daemon to get better debug?

The version I'm running is:

ntop v.4.1.0 (64 bit) [x86_64-2.6.32-33-server-linux-gnu]

Thanks in advance!!!

________________________________

Note: This e-mail and any attachments may be privileged and confidential and 
protected from disclosure. If the reader of this message is not the intended 
recipient, or an employee or agent responsible for delivering this message to 
the intended recipient, you are hereby notified that any disclosure, copying, 
distribution or use of this e-mail and any attachments is strictly prohibited. 
If you have received this e-mail in error, please notify us immediately by 
returning it to the sender and deleting it from your computer system. Thank you 
for your cooperation.
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop





<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 
1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to