Le 31/10/2014 17:13, Yuri Francalacci a écrit :
Please post the console output (from start to stop).

Please find it in attachment

Is pfring loaded?

No
So I'm just just using pcap I guess

Thanks

If so could you tell how it has been loaded (options/transparent mode)?
Yuri
###############################################
Yuri Francalacci - [email protected] <mailto:[email protected]> - http://www.ntop.org
"Simplicity is the ultimate sophistication" - Leonardo da Vinci
###############################################

On 31 Oct 2014, at 16:58, Jérôme BERTHIER <[email protected] <mailto:[email protected]>> wrote:

Hi,

I just installed ntopng from stable repo on CentOS 7.
My server owns several NIC cards :
em1 is used for adressing the system
em2 is used to receive a trafic mirroring from my switch which replicates a firewall port.

redis service is started with default parameters.
I created a working directory writable for nobody user (for now).

On first step, I just tried to launch ntopng manually :
ntopng -i em2 -d /appli/ntopng -m "10.93.0.0/16,192.168.1.0/24" -G=/var/tmp/ntopng.pid -l -v

WebUI is up on port 3000. I can see that the em2 interface receives trafic as expected and counts hosts. However, no analysis occurs. Flows and hosts detail pages just print "No results found".

I tried a lot of test as specifying every path, use root account... no way to get results.

I noted two points :
- if I switched to em1, it works but it's my service interface...
- the interface em2 does not switched to promiscuous mode.
- when ntopng is running, I can see network trafic on redis service port

selinux is not running.

What did I missed ?

Regards

--
Jérôme BERTHIER


_______________________________________________
Ntop mailing list
[email protected] <mailto:[email protected]>
http://listgateway.unipi.it/mailman/listinfo/ntop



_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop


--
Jérôme BERTHIER
DSI - SESI - Reseau
Inria Bordeaux - Sud-Ouest
05 24 57 40 50

Startup command : ntopng -i em2 -d /appli/ntopng -m 
"10.93.0.0/16,192.168.1..0/24" -G=/var/tmp/ntopng.pid -l -v

Logs :
31/Oct/2014 17:14:54 [Ntop.cpp:680] Setting local networks to 
10.93.0.0/16,192.168.1..0/24
31/Oct/2014 17:14:54 [AddressResolution.cpp:133] Rule '10.93.0.0'/'16'
31/Oct/2014 17:14:54 [AddressResolution.cpp:133] Rule '192.168.1..0'/'24'
31/Oct/2014 17:14:54 [Redis.cpp:86] Successfully connected to Redis 
127.0.0.1:6379
31/Oct/2014 17:14:54 [PcapInterface.cpp:81] Reading packets from interface 
em2...
31/Oct/2014 17:14:54 [Ntop.cpp:804] Registered interface em2 [id: 0]
31/Oct/2014 17:14:54 [Utils.cpp:250] User changed to nobody
31/Oct/2014 17:14:54 [main.cpp:186] ERROR: Unable to store PID in file 
=/var/tmp/ntopng.pid
31/Oct/2014 17:14:54 [HTTPserver.cpp:374] HTTPS Disabled: missing SSL 
certificate /usr/share/ntopng/httpdocs/ssl/ntopng-cert.pem
31/Oct/2014 17:14:54 [HTTPserver.cpp:376] Please read 
https://svn.ntop.org/svn/ntop/trunk/ntopng/README.SSL if you want to enable SSL.
31/Oct/2014 17:14:54 [HTTPserver.cpp:420] Web server dirs 
[/usr/share/ntopng/httpdocs][/usr/share/ntopng/scripts]
31/Oct/2014 17:14:54 [HTTPserver.cpp:423] HTTP server listening on port 3000
31/Oct/2014 17:14:54 [main.cpp:231] Working directory: /appli/ntopng
31/Oct/2014 17:14:54 [main.cpp:233] Scripts/HTML pages directory: 
/usr/share/ntopng
31/Oct/2014 17:14:54 [Ntop.cpp:218] Welcome to ntopng x86_64 v.1.2.2 (r1.2.2) - 
(C) 1998-14 ntop.org
31/Oct/2014 17:14:54 [PeriodicActivities.cpp:53] Started periodic activities 
loop...
31/Oct/2014 17:14:54 [PeriodicActivities.cpp:91] Starting script 
/usr/share/ntopng/scripts/callbacks/second.lua
31/Oct/2014 17:14:54 [RuntimePrefs.cpp:32] Dump alerts into syslog
31/Oct/2014 17:14:54 [Lua.cpp:1798] ntop_get_dirs() called
31/Oct/2014 17:14:54 [Ntop.cpp:288] Adding 127.0.0.1/32 as IPv4 interface 
address
31/Oct/2014 17:14:54 [AddressResolution.cpp:133] Rule '127.0.0.1'/'32'
31/Oct/2014 17:14:54 [AddressResolution.cpp:133] Rule '127.0.0.1'/'32'
31/Oct/2014 17:14:54 [Ntop.cpp:288] Adding 10.93.130.213/32 as IPv4 interface 
address
31/Oct/2014 17:14:54 [AddressResolution.cpp:133] Rule '10.93.130.213'/'32'
31/Oct/2014 17:14:54 [AddressResolution.cpp:133] Rule '10.93.130.213'/'32'
31/Oct/2014 17:14:54 [NetworkInterface.cpp:842] Started packet polling on 
interface em2 [id: 0]...
31/Oct/2014 17:14:54 [Lua.cpp:205] ntop_get_interface_names() called
31/Oct/2014 17:14:54 [Lua.cpp:279] ntop_find_interface() called
31/Oct/2014 17:14:54 [Lua.cpp:235] get_ntop_interface() called
31/Oct/2014 17:14:54 [Lua.cpp:1789] ntop_get_interface_stats() called
31/Oct/2014 17:14:54 [Lua.cpp:1798] ntop_get_dirs() called
31/Oct/2014 17:14:54 [Lua.cpp:521] ntop_is_windows() called
31/Oct/2014 17:14:54 [Lua.cpp:473] ntop_get_file_dir_exists() called
31/Oct/2014 17:14:54 [Lua.cpp:521] ntop_is_windows() called
31/Oct/2014 17:14:54 [Lua.cpp:473] ntop_get_file_dir_exists() called
31/Oct/2014 17:14:54 [Lua.cpp:1385] 
ntop_rrd_update(/appli/ntopng/0/rrd/bytes.rrd) N:95451
31/Oct/2014 17:14:54 [Lua.cpp:521] ntop_is_windows() called
31/Oct/2014 17:14:54 [Lua.cpp:473] ntop_get_file_dir_exists() called
31/Oct/2014 17:14:54 [Lua.cpp:1385] 
ntop_rrd_update(/appli/ntopng/0/rrd/packets.rrd) N:114
31/Oct/2014 17:14:55 [HTTPserver.cpp:289] [HTTP] /lua/network_load.lua
31/Oct/2014 17:14:55 [HTTPserver.cpp:314] [HTTP] /lua/network_load.lua 
[/usr/share/ntopng/scripts/lua/network_load.lua]
31/Oct/2014 17:14:55 [Lua.cpp:1798] ntop_get_dirs() called
31/Oct/2014 17:14:55 [Lua.cpp:279] ntop_find_interface() called
31/Oct/2014 17:14:55 [Lua.cpp:235] get_ntop_interface() called
31/Oct/2014 17:14:55 [Lua.cpp:1789] ntop_get_interface_stats() called
31/Oct/2014 17:14:55 [Lua.cpp:1283] ntop_interface_name2id() called
31/Oct/2014 17:14:55 [Lua.cpp:2479] is_historical_interface() called
31/Oct/2014 17:14:55 [Lua.cpp:1825] ntop_get_info() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:1813] ntop_get_uptime() called
31/Oct/2014 17:14:55 [Lua.cpp:1554] ntop_get_prefs() called
31/Oct/2014 17:14:55 [Lua.cpp:2258] ntop_get_num_queued_alerts() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:55 [PeriodicActivities.cpp:91] Starting script 
/usr/share/ntopng/scripts/callbacks/second.lua
31/Oct/2014 17:14:55 [Lua.cpp:1798] ntop_get_dirs() called
31/Oct/2014 17:14:55 [Lua.cpp:205] ntop_get_interface_names() called
31/Oct/2014 17:14:55 [Lua.cpp:279] ntop_find_interface() called
31/Oct/2014 17:14:55 [Lua.cpp:235] get_ntop_interface() called
31/Oct/2014 17:14:55 [Lua.cpp:1789] ntop_get_interface_stats() called
31/Oct/2014 17:14:55 [Lua.cpp:1798] ntop_get_dirs() called
31/Oct/2014 17:14:55 [Lua.cpp:521] ntop_is_windows() called
31/Oct/2014 17:14:55 [Lua.cpp:473] ntop_get_file_dir_exists() called
31/Oct/2014 17:14:55 [Lua.cpp:521] ntop_is_windows() called
31/Oct/2014 17:14:55 [Lua.cpp:473] ntop_get_file_dir_exists() called
31/Oct/2014 17:14:55 [Lua.cpp:1385] 
ntop_rrd_update(/appli/ntopng/0/rrd/bytes.rrd) N:4454014
31/Oct/2014 17:14:55 [Lua.cpp:521] ntop_is_windows() called
31/Oct/2014 17:14:55 [Lua.cpp:473] ntop_get_file_dir_exists() called
31/Oct/2014 17:14:55 [Lua.cpp:1385] 
ntop_rrd_update(/appli/ntopng/0/rrd/packets.rrd) N:8557
31/Oct/2014 17:14:56 [HTTPserver.cpp:289] [HTTP] /lua/network_load.lua
31/Oct/2014 17:14:56 [HTTPserver.cpp:314] [HTTP] /lua/network_load.lua 
[/usr/share/ntopng/scripts/lua/network_load.lua]
31/Oct/2014 17:14:56 [Lua.cpp:1798] ntop_get_dirs() called
31/Oct/2014 17:14:56 [Lua.cpp:279] ntop_find_interface() called
31/Oct/2014 17:14:56 [Lua.cpp:235] get_ntop_interface() called
31/Oct/2014 17:14:56 [Lua.cpp:1789] ntop_get_interface_stats() called
31/Oct/2014 17:14:56 [Lua.cpp:1283] ntop_interface_name2id() called
31/Oct/2014 17:14:56 [Lua.cpp:2479] is_historical_interface() called
31/Oct/2014 17:14:56 [Lua.cpp:1825] ntop_get_info() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:1813] ntop_get_uptime() called
31/Oct/2014 17:14:56 [Lua.cpp:1554] ntop_get_prefs() called
31/Oct/2014 17:14:56 [Lua.cpp:2258] ntop_get_num_queued_alerts() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [Lua.cpp:2389] ntop_lua_http_print() called
31/Oct/2014 17:14:56 [PeriodicActivities.cpp:91] Starting script 
/usr/share/ntopng/scripts/callbacks/second.lua
31/Oct/2014 17:14:56 [Lua.cpp:1798] ntop_get_dirs() called
31/Oct/2014 17:14:56 [Lua.cpp:205] ntop_get_interface_names() called
31/Oct/2014 17:14:56 [Lua.cpp:279] ntop_find_interface() called
31/Oct/2014 17:14:56 [Lua.cpp:235] get_ntop_interface() called
31/Oct/2014 17:14:56 [Lua.cpp:1789] ntop_get_interface_stats() called
31/Oct/2014 17:14:56 [Lua.cpp:1798] ntop_get_dirs() called
31/Oct/2014 17:14:56 [Lua.cpp:521] ntop_is_windows() called
31/Oct/2014 17:14:56 [Lua.cpp:473] ntop_get_file_dir_exists() called
31/Oct/2014 17:14:56 [Lua.cpp:521] ntop_is_windows() called
31/Oct/2014 17:14:56 [Lua.cpp:473] ntop_get_file_dir_exists() called
31/Oct/2014 17:14:56 [Lua.cpp:1385] 
ntop_rrd_update(/appli/ntopng/0/rrd/bytes.rrd) N:12304279
31/Oct/2014 17:14:56 [Lua.cpp:521] ntop_is_windows() called
31/Oct/2014 17:14:56 [Lua.cpp:473] ntop_get_file_dir_exists() called
31/Oct/2014 17:14:56 [Lua.cpp:1385] 
ntop_rrd_update(/appli/ntopng/0/rrd/packets.rrd) N:19606
^C31/Oct/2014 17:14:56 [main.cpp:37] Shutting down...
31/Oct/2014 17:14:56 [PcapInterface.cpp:168] Terminated packet polling for em2
31/Oct/2014 17:14:58 [ProtoStats.cpp:35] [IPv4]  0 B/0.00 Packets
31/Oct/2014 17:14:58 [ProtoStats.cpp:35] [IPv6]  0 B/0.00 Packets
31/Oct/2014 17:14:58 [ProtoStats.cpp:35] [ARP]   0 B/0.00 Packets
31/Oct/2014 17:14:58 [ProtoStats.cpp:35] [MPLS]  0 B/0.00 Packets
31/Oct/2014 17:14:58 [ProtoStats.cpp:35] [Other] 12.30 MB/20.91 K Packets
31/Oct/2014 17:14:58 [Ntop.cpp:830] Interface em2 [running: 0]
31/Oct/2014 17:14:58 [main.cpp:55] Deleted PID =/var/tmp/ntopng.pid [rc: -1]
31/Oct/2014 17:14:58 [NetworkInterface.cpp:202] Flushing host contacts for 
interface em2
31/Oct/2014 17:14:58 [NetworkInterface.cpp:868] Cleanup interface em2
31/Oct/2014 17:14:58 [HTTPserver.cpp:436] HTTP server terminated
31/Oct/2014 17:14:58 [AddressResolution.cpp:223] Address resolution stats [0 
resolved][0 failures]

Attachment: smime.p7s
Description: Signature cryptographique S/MIME

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to