Thanks Luca, I just tried with nprobe --zmq "tcp://*:5556" -i none -n none --collector-port 9995 -b 2
but I see no sFlow traffic at all. How nprobe knows on which interface sFlows are arriving? With nprobe --zmq "tcp://*:5556" -i eth1 -n none --collector-port 9995 -b 2 I receive sFlows, but nothing change on ntopng, same problem. It displays that some traffic is sFlow but no additional info (here a screenshot on my ntopng https://www.dropbox.com/s/ik0gxfrw1e9ige7/Screenshot%202014-01-20%2012.20.48.png) Thanks again, Francesco On Mon, Jan 20, 2014 at 2:50 PM, Luca Deri <[email protected]> wrote: > Francesco > set "-i none -n none" on nprobe and try again > > luca > On 01/18/2014 05:40 PM, Francesco De Giorgi wrote: >> Hi all, >> I'm running nprobe as a sflow collector as follows (I have a switch >> sending sflow to port 9995 of eth1 of ) >> >> nprobe --zmq "tcp://*:5556" -i eth1 --collector-port 9995 -b 2 >> >> and ntopng on the same machine >> >> ./ntopng -i "tcp://127.0.0.1:5556" -m 192.168.0.0/16 >> >> but I can't understand how ntopng is analyzing sflow. The web page >> only reports, in percentage, that some traffic is sflow and is coming >> from the switch, but it doesn't seem to "read" the sflow traffic >> samples to show information about network traffic. >> >> Am I doing something wrong? >> >> Thanks, >> Francesco >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop -- Francesco De Giorgi eXact lab s.r.l. +39 329 1529493 www.exact-lab.it _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
