If there is an issue it should not be on ntopng, but in nprobe. In the configuration you are using ntopng acts as a frontend GUI for nprobe, hence the visualized data are sent by nprobe. To be sure of this, you can try to save Netflows packets sent by nprobe to a "fake" collector (just to emit flows and save in a pcap file) and check if the expect flows are included in the saved packets. Yuri
Sent from my iPhone > Il giorno 02/giu/2015, alle ore 20:32, "Robert Lasota" <[email protected]> ha > scritto: > > Dnia Wtorek, 2 Czerwca 2015 18:53 Francalacci Yuri <[email protected]> napisał(a) > Inline > > Sent from my iPhone > > Il giorno 02/giu/2015, alle ore 14:29, "Robert Lasota" <[email protected]> ha > scritto: > > Dnia Środa, 27 Maja 2015 10:32 Yuri Francalacci <[email protected]> napisał(a) > ntopng can’t do that. > in general (in addition to the common traffic captures): > nprobe can store flows into mysql > ntopng can fetch data from nprobe (using zmq endpoints in nprobe) > Yuri > It's shame, but what can I do... > Contribution are welcome > > > heh, good answer ;) > > > One more question: I have run now command: > nprobe -G ---mysql-skip-db-creation -zmq tcp://*:5556 -i eth0 > --mysql=10.192.2.77@3306:netflow::rsyslog:D9edS84aIs > .. to it could store flows in mysql and also provide port for ntopng to > connect , and the problem is that nprobe doesn't listen on port.. why ? > If you did not have done error of copy/paste, I see a mistyped option "--" is > missing in zmq option and enclosing "'" on the zmq value. > Yuri > > > Yeah , I had a typo, now its working: > nprobe -G --mysql-skip-db-creation --zmq tcp://*:5556 -i eth0 > --mysql=10.192.2.77@3306:netflow::rsyslog:D9e > > BUT it appered new problem :(, I installed v.2. as you wanted (in interface) > and I think its not working , on tested router I ran wget ftp download (with > 500KB speed) and on server with Ntop in flows tab - nothing, I mean don't see > any ftp traffic > > router have 2 nics, wan with 10.192.2.120 and lan with 10.192.1.115 > server with nprobe connectiing like this: > ntopng -e -i tcp://10.192.2.120:5556 > # telnet 10.192.2.120 5556 > Trying 10.192.2.120... > Connected to 10.192.2.120. > Escape character is '^]'. > ^] > telnet> quit > Connection closed. > > What is going on ? > Robert > > > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
