Stefan
only a subset of fields are supported in ntop
Luca
On 04/01/2013 12:43 PM, Stefan Schwarz wrote:
Hi,
i have nprobe (v.6.10.130203) and ntop (svn rev 6107) up and running.
Exporting IPFIX with
./nprobe -n localhost:2055 -V 10 -i eth0 -b 2 -u 1 -Q 2 -T
"%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP
%IN_PKTS %L4_DST_PORT %L4_SRC_PORT %IN_BYTES %FIRST_SWITCHED
%LAST_SWITCHED %PROTOCOL %IPV4_SRC_MASK %IPV4_DST_MASK %IN_SRC_MAC
%OUT_DST_MAC %TCP_FLAGS %CLIENT_NW_DELAY_SEC %CLIENT_NW_DELAY_USEC
%SERVER_NW_DELAY_SEC %SERVER_NW_DELAY_USEC %APPL_LATENCY_SEC
%APPL_LATENCY_USEC %HTTP_URL %HTTP_RET_CODE %HTTP_REFERER %HTTP_UA
%HTTP_MIME"
works as expected, using wireshark i can see that templates and flow
data according to the templates are being generated correctly.
ntop collects flows an does its statistics correctly, but i'd like to
see my template details like %HTTP_URL and %HTTP_RET_CODE (which are
definitely populated) within ntop. Actually i cannot find a way to do
this.
How can i see these informations within ntop?
Stefan
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
