Hi, i have nprobe (v.6.10.130203) and ntop (svn rev 6107) up and running. Exporting IPFIX with
./nprobe -n localhost:2055 -V 10 -i eth0 -b 2 -u 1 -Q 2 -T "%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %L4_DST_PORT %L4_SRC_PORT %IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED %PROTOCOL %IPV4_SRC_MASK %IPV4_DST_MASK %IN_SRC_MAC %OUT_DST_MAC %TCP_FLAGS %CLIENT_NW_DELAY_SEC %CLIENT_NW_DELAY_USEC %SERVER_NW_DELAY_SEC %SERVER_NW_DELAY_USEC %APPL_LATENCY_SEC %APPL_LATENCY_USEC %HTTP_URL %HTTP_RET_CODE %HTTP_REFERER %HTTP_UA %HTTP_MIME"
works as expected, using wireshark i can see that templates and flow data according to the templates are being generated correctly.
ntop collects flows an does its statistics correctly, but i'd like to see my template details like %HTTP_URL and %HTTP_RET_CODE (which are definitely populated) within ntop. Actually i cannot find a way to do this.
How can i see these informations within ntop?
Stefan
smime.p7s
Description: S/MIME Kryptografische Unterschrift
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
