well, I have been solve this problem by this startup options:

/usr/local/bin/nprobe --zmq "tcp://*:5556" -i eth2 -n none
/usr/local/bin/nprobe --zmq "tcp://*:5555" -i eth1 -n none
/usr/local/bin/ntopng -i tcp://127.0.0.1:5555 -i tcp://127.0.0.1:5556

eth1 is monitor port for vlan1
eth2 is monitor port for vlan2

but this way, I have to switch between eth1([email protected]:5555) and
eth2([email protected]:5556)  to view vlan1 and vlan2's traffic.

I would like to combine the two nic's traffic together, which mean's I
could view all traffic from one interface just like [email protected]
:<some-port>

Is that possible and how to achieve that?



On Mon, Dec 16, 2013 at 5:57 PM, Yuri Francalacci <[email protected]> wrote:

> you cannot run two instances of nprobe on the same zmq port if they run on
> the same host.
> anyway, use " " to avoid the * expansion done by the shell.
> To have a better debug, check nprobe output and if it is listening on the
> zmq port you specified.
> Yuri
> ###############################################
> Yuri Francalacci   -   [email protected]   -   http://www.ntop.org
> "Simplicity is the ultimate sophistication" - Leonardo da Vinci
> ###############################################
>
> On Dec 15, 2013, at 2:13 PM, darkblue wrote:
>
> hi,
>
> my server has 3 nic, 1 for managerment, other 2 for different network
> device's monitor-port
>
> so I run two instance nprobe and 1 instance ntopng
>
> /usr/local/bin/nprobe --zmq tcp://*:5666 -i eth2 -n none
> /usr/local/bin/nprobe --zmq tcp://*:5666 -i eth1 -n none
>
> ntopng -i tcp://127.0.0.1:5666
>
> I could confirm that traffic arrived at both eth1 and eth2
> tcpdump -nvi eth1
> tcpdump -nvi eth2
>
> but I could not see the eth1's traffic on ntopng
>
> any idea?
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to