Dear All, We notice "ERROR: ntop_find_interface : expected string, got number" every time we restart ntopng service.
1) Pl do help to know how to run switch -F in ntopng config file to record historical data related to interface eth1. Following parameters enabled at ntopng.conf file /etc/ntopng/ntopng.conf: -G=/var/run/ntopng.pid -i=eth1 -w=4000 -m=192.168.0.0/16 -n=1 -d=/var/tmp/ntopng -U=ntopng -F=eth1 ntopng is started by below command: # /usr/local/bin/ntopng /etc/ntopng/ntopng.conf & 22/Sep/2014 10:02:04 [PcapInterface.cpp:81] Reading packets from interface eth1... 22/Sep/2014 10:02:04 [Ntop.cpp:710] Registered interface eth1 [id: 0] 22/Sep/2014 10:02:04 [Ntop.cpp:710] Registered interface Historical [id: 1] 22/Sep/2014 10:02:04 [Utils.cpp:251] User changed to ntopng 22/Sep/2014 10:02:04 [main.cpp:184] PID stored in file /var/run/ntopng.pid 22/Sep/2014 10:02:04 [HTTPserver.cpp:351] HTTPS Disabled: missing SSL certificate /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem 22/Sep/2014 10:02:04 [HTTPserver.cpp:352] Please read https://svn.ntop.org/svn/ntop/trunk/ntopng/README.SSL if you want to enable SSL. 22/Sep/2014 10:02:04 [HTTPserver.cpp:389] Web server dirs [/usr/local/share/ntopng/httpdocs][/usr/local/share/ntopng/scripts] 22/Sep/2014 10:02:04 [HTTPserver.cpp:392] HTTP server listening on port 4000 22/Sep/2014 10:02:04 [main.cpp:232] Working directory: /var/tmp/ntopng 22/Sep/2014 10:02:04 [main.cpp:234] Scripts/HTML pages directory: /usr/local/share/ntopng 22/Sep/2014 10:02:04 [Ntop.cpp:206] Welcome to ntopng x86_64 v.1.2.1 (r1.2.1) - (C) 1998-14 ntop.org 22/Sep/2014 10:02:04 [PeriodicActivities.cpp:53] Started periodic activities loop... 22/Sep/2014 10:02:04 [RuntimePrefs.cpp:32] Dump alerts into syslog 22/Sep/2014 10:02:04 [NetworkInterface.cpp:800] Started packet polling on interface eth1 [id: 0]... 22/Sep/2014 10:02:04 [NetworkInterface.cpp:800] Started packet polling on interface Historical [id: 1]... root@ccserver:~# 22/Sep/2014 10:03:08 [Lua.cpp:72] ERROR: ntop_find_interface : expected string, got number 2) Is it possible to say define inbound ( traffic from outside to LAN) threshold say 100MB and alert such hosts by email to netadmins? Thanks for your help, A J Naik
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
