I’ve made what you’ve recommended but I see now the following warnings during 
nprobe startup:

08/Dec/2014 11:59:09 [nprobe.c:5459] WARNING: Your template lacks some 
important fields
08/Dec/2014 11:59:09 [nprobe.c:5460] WARNING: Unless you know what you are 
doing, make sure
08/Dec/2014 11:59:09 [nprobe.c:5461] WARNING: your template (-T) contains at 
least
08/Dec/2014 11:59:09 [nprobe.c:5462] WARNING: %IPV4_SRC_ADDR %IPV4_DST_ADDR 
%PROTOCOL
08/Dec/2014 11:59:09 [nprobe.c:5463] WARNING: %L4_SRC_PORT %L4_DST_PORT
08/Dec/2014 11:59:09 [nprobe.c:5491] WARNING: IPv4/v6 addresses will be ignored 
(your template lacks %IPV4_XXX_ADDR/%IPV6_XXX_ADDR)
08/Dec/2014 11:59:09 [nprobe.c:5498] WARNING: L4 ports will be ignored (your 
template lacks %L4_SRC_PORT/%L4_DST_PORT)
08/Dec/2014 11:59:09 [nprobe.c:5515] WARNING: Protocol will be ignored (your 
template lacks %PROTOCOL)

So, I’ve added -> -T %EXPORTER_IPV4_ADDRESS %IPV4_SRC_ADDR %IPV4_DST_ADDR 
%PROTOCOL %L4_SRC_PORT %L4_DST_PORT %IPV4_XXX_ADDR %IPV6_XXX_ADDR

But this does’t seem to make the warnings to disappear.

Gerhard,


> On Dec 2, 2014, at 4:08 PM, Luca Deri <[email protected]> wrote:
> 
> Gerhard,
> in ntopng flows are converted by nprobe. Please make sure that you add in the 
> template with -T the %EXPORTER_IPV4_ADDRESS information element, so that this 
> source IP is propagated to ntopng. Done this a new lua report for depicting 
> this information needs to be implemented
> Luca
>> On 28 Oct 2014, at 19:42, Gerhard Mourani <[email protected]> wrote:
>> 
>> Hello,
>> 
>> I’ve configured my switches and firewalls to send sflow to ntopng and it’s 
>> working. Now I would like to know where in ntopng I can see which device is 
>> sending sflow and the numbers for each one as we have it in the old ntop 
>> version?
>> 
>> Gerhard,
>> 
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
> 
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to