Michael, I suggest you to check using tcpdump on ntopng host if you mirror setup is correct (you should see the traffic of you whole network). Then if it is ok, check ntopng command line options. Yuri ############################################### Yuri Francalacci - [email protected] - http://www.ntop.org "Simplicity is the ultimate sophistication" - Leonardo da Vinci ###############################################
> On 09 Jan 2015, at 17:00, Shavelieva, Michael E (Southcentral) > <[email protected]> wrote: > > Cheers All, > > Setup: > > Fiber into Building > | > Fiber from outside to router > | > |_____________ > |Router | > | > | > RJ45 form port 1/0/1 to Cisco 3750X port 1/0/1 > | > |______________ > |Cisco 3750X | > | > | _____________ > |----P1----Mirror----P19-----|NTOP & nProbe | > | > | > |====All other Lan users > > So all internet traffic to the LAN comes through port 1 of the Cisco Switch. > There are many VLANs on the LAN side, however Port 1 only operates VLAN 20. > So I’ve tried Port Mirroring(Cisco Monitor Session) as below. > > Session 1 > --------- > Type : Local Session > Source Ports : > Both : Gi1/0/1 > Destination Ports : Gi1/0/19 > Encapsulation : Native > Ingress : Disabled > > > I am only seeing RTP traffic for some reason and very little at that. When I > go to the Hosts List I only see 255.255.255.255 & 0.0.0.0 so I’m not sure if > my port monitoring is incorrect in setup or if I didn’t properly setup > ntopng/nprobe. Looking at the ntopng host’s network interface statistics it > does match what ntop is reporting as 40.5GB of traffic having been passed. So > I am leaning towards an incorrect Port mirroring configuration at the switch > level. > > Thanks All, > > > > Michael Shavelieva > IT Specialist > Southcentral Kentucky Community and Technical College > 1845 Loop Drive > Bowling Green, KY 42101 > O:270.901.1193 C:270.202.3917 > www.southcentral.kctcs.edu <http://www.bowlinggreen.kctcs.edu/> > HIGHER EDUCATION BEGINS HERE > > _______________________________________________ > Ntop mailing list > [email protected] <mailto:[email protected]> > http://listgateway.unipi.it/mailman/listinfo/ntop > <http://listgateway.unipi.it/mailman/listinfo/ntop>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
