Dear Luca, 1. Please let us know how to run ntopng web interface listen to ipv4 and ipv6 2. How to check from port mirror ipv6 traffic is been sniffed by ntopng
Please let me know you any changes need in command line or interface configurations. Thanks for help. Regards, Anilkumar On Thu, Mar 19, 2015 at 6:37 PM, Anilkumar Naik <[email protected]> wrote: > Hello, > > I restarted ntopng now errors not seen. But ipv6 web interface and ipv6 > traffic yet to work. > > *ifconfig eth0* > eth0 Link encap:Ethernet HWaddr 78:e3:b5:05:b3:b4 > inet addr:1xx.1xx.1.100 Bcast:158.144.1.255 Mask:255.255.255.0 > inet6 addr: 2xx6:f00:1:1::cf/64 Scope:Global > inet6 addr: fe80::7ae3:b5ff:fe05:b3b4/64 Scope:Link > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:64758 errors:0 dropped:0 overruns:0 frame:0 > TX packets:43734 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:9309337 (9.3 MB) TX bytes:9332403 (9.3 MB) > > *ifconfig eth1* > > eth1 Link encap:Ethernet HWaddr 78:e3:b5:05:b3:b6 > inet addr:1x.1xx.9.61 Bcast:10.144.9.255 Mask:255.255.255.0 > inet6 addr: fe80::7ae3:b5ff:fe05:b3b6/64 Scope:Link > inet6 addr: 2xx6:f00:1:79:1::15/64 Scope:Global > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:19221271 errors:1 dropped:0 overruns:0 frame:1 > TX packets:120 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:15249988809 (15.2 GB) TX bytes:15601 (15.6 KB) > > *netstat -an | grep "400"* > tcp 0 0 0.0.0.0:4000 0.0.0.0:* LISTEN > > > *ntopng -G /var/run/ntopng.pid -i eth1 -w 4000 -n 1 -d /var/tmp/ntopng -U > ntopng -F eth1* > 19/Mar/2015 18:24:44 [Prefs.cpp:620] WARNING: Discarding -F eth1: value > out of range > 19/Mar/2015 18:24:44 [Ntop.cpp:767] Setting local networks to > 192.168.0.0/16,172.16.0.0/12,10.0.0.0/8,127.0.0.0/8,0.0.0.0/32,224.0.0.0/8,239.0.0.0/8,255.255.255.255/32,127.0.0.0/8 > 19/Mar/2015 18:24:44 [Redis.cpp:93] Successfully connected to Redis > 127.0.0.1:6379@0 > 19/Mar/2015 18:24:44 [PacketDumperTuntap.cpp:76] Interface tap0 has MAC > DA:AA:8C:A3:D3:1F > 19/Mar/2015 18:24:44 [PacketDumperTuntap.cpp:38] eth1: dumping packets on > tap interface tap0 > 19/Mar/2015 18:24:44 [PcapInterface.cpp:81] Reading packets from interface > eth1... > 19/Mar/2015 18:24:44 [Ntop.cpp:1015] Registered interface view eth1 [id: 0] > 19/Mar/2015 18:24:44 [Ntop.cpp:985] Registered interface eth1 [id: 0] > 19/Mar/2015 18:24:44 [Utils.cpp:276] WARNING: Unable to locate user > anonymous > 19/Mar/2015 18:24:44 [main.cpp:205] PID stored in file /var/run/ntopng.pid > 19/Mar/2015 18:24:44 [HTTPserver.cpp:423] HTTPS Disabled: missing SSL > certificate /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem > 19/Mar/2015 18:24:44 [HTTPserver.cpp:425] Please read > https://svn.ntop.org/svn/ntop/trunk/ntopng/README.SSL if you want to > enable SSL. > 19/Mar/2015 18:24:44 [HTTPserver.cpp:470] Web server dirs > [/usr/local/share/ntopng/httpdocs][/usr/local/share/ntopng/scripts] > 19/Mar/2015 18:24:44 [HTTPserver.cpp:473] HTTP server listening on port > 4000 > 19/Mar/2015 18:24:44 [main.cpp:253] Working directory: /var/tmp/ntopng > 19/Mar/2015 18:24:44 [main.cpp:255] Scripts/HTML pages directory: > /usr/local/share/ntopng > 19/Mar/2015 18:24:44 [Ntop.cpp:256] Welcome to ntopng x86_64 v.1.99.150319 > (r9136) - (C) 1998-15 ntop.org > 19/Mar/2015 18:24:44 [PeriodicActivities.cpp:53] Started periodic > activities loop... > 19/Mar/2015 18:24:44 [RuntimePrefs.cpp:32] Dumping alerts into syslog > 19/Mar/2015 18:24:44 [NetworkInterface.cpp:1114] Started packet polling on > interface eth1 [id: 0]... > > *ntopng -h* > Available interfaces (-i <interface index>): > 1. eth0 > 2. tap0 > 3. nflog > 4. nfqueue > 5. eth1 > 6. eth2 > 7. eth3 > 8. any > 9. lo > > Regards, > Anilkumar > > On Thu, Mar 19, 2015 at 6:17 PM, Luca Deri <[email protected]> wrote: > >> Hi, >> please do >> 1. provide the whole command line you have used >> 2. type ntopng -h and report the list of interfaces you have >> >> thanks Luca >> >> >> On 03/19/2015 01:32 PM, Anilkumar Naik wrote: >> >> Dear Luca, >> >> After SVN code following errors noticed. Any help? >> >> 19/Mar/2015 17:51:22 [HTTPserver.cpp:473] HTTP server listening on port >> 3000 >> 19/Mar/2015 17:51:22 [main.cpp:253] Working directory: /var/tmp/ntopng >> 19/Mar/2015 17:51:22 [main.cpp:255] Scripts/HTML pages directory: >> /usr/local/share/ntopng >> 19/Mar/2015 17:51:22 [Ntop.cpp:256] Welcome to ntopng x86_64 >> v.1.99.150319 (r9136) - (C) 1998-15 ntop.org >> 19/Mar/2015 17:51:22 [PeriodicActivities.cpp:53] Started periodic >> activities loop... >> 19/Mar/2015 17:51:22 [RuntimePrefs.cpp:32] Dumping alerts into syslog >> 19/Mar/2015 17:51:22 [NetworkInterface.cpp:1114] Started packet polling >> on interface eth1 [id: 0]... >> 19/Mar/2015 17:51:22 [NetworkInterface.cpp:1114] Started packet polling >> on interface eth0 [id: 3]... >> 19/Mar/2015 17:51:22 [NetworkInterface.cpp:1114] Started packet polling >> on interface eth2 [id: 4]... >> 19/Mar/2015 17:51:22 [NetworkInterface.cpp:1114] Started packet polling >> on interface eth3 [id: 5]... >> 19/Mar/2015 17:51:22 [NetworkInterface.cpp:1114] Started packet polling >> on interface lo [id: 6]... >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> '[802-3-ethernet]': [802-3-ethernet]: No such file or directory >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> 'duplex=full': duplex=full: No such file or directory >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> 'mac-address=78:E3:B5:05:B3:B6': mac-address=78:E3:B5:05:B3:B6: No such >> file or directory >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> '[connection]': [connection]: No such file or directory >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> 'id=eth1': id=eth1: No such file or directory >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> 'uuid=f4b153a3-49ed-415e-afbe-b843428b8416': >> uuid=f4b153a3-49ed-415e-afbe-b843428b8416: No such file or directory >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> 'type=802-3-ethernet': type=802-3-ethernet: No such file or directory >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> 'timestamp=1426140343': timestamp=1426140343: No such file or directory >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> '[ipv6]': [ipv6]: No such file or directory >> 19/Mar/2015 17:51:23 [PcapInterface.cpp:128] ERROR: Unable to open file >> 'method=manual': method=manual: No such file or directory >> >> Regards, >> Anilkumar >> >> >> On Thu, Mar 19, 2015 at 3:49 AM, Luca Deri <[email protected]> wrote: >> >>> Hi Anilkumar >>> can you please repeat the test using the code in SVN? >>> >>> Luca >>> >>> > On 13 Mar 2015, at 07:17, Anilkumar Naik <[email protected]> >>> wrote: >>> > >>> > Dear All, >>> > >>> > Need your help to configure following. >>> > >>> > 1. Listen ntopng web interface on ipv6 and ipv4 ( dual stack) >>> > >>> > 2. We have configured port mirror ( all traffic seen at router >>> interface is given to ntopng). But we are unable to see any ipv6 protocols >>> in traffic. However we already using ipv6 addresses for Internet. Can you >>> pl help how to change this in ntopng? >>> > >>> > NTOPNG conf file: >>> > >>> > -G=/var/run/ntopng.pid >>> > -i=eth1 >>> > -w=4000 >>> > -m=xxxx:f00:1::/48 >>> > -n=1 >>> > -d=/var/tmp/ntopng >>> > -U=ntopng >>> > -F=eth1 >>> > -l >>> > >>> > Regards, >>> > Anilkumar >>> > _______________________________________________ >>> > Ntop mailing list >>> > [email protected] >>> > http://listgateway.unipi.it/mailman/listinfo/ntop >>> >>> _______________________________________________ >>> Ntop mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop >>> >> >> >> >> _______________________________________________ >> Ntop mailing >> [email protected]http://listgateway.unipi.it/mailman/listinfo/ntop >> >> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> > >
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
