Can you guys generate and send privately/upload a NetFlow pcap that contains both template and data records for IPv4 and IPv6? I want to try and reproduce.
Thanks, Simone > On 10 Feb 2018, at 12:52, Matthias Henze <li...@mhcsoftware.de> wrote: > > Hi, > > thanks for pointing this out and count me in, as mine stopped working too. My > configs: > > NPROBE 1 - version: 8.3.180129-6049 > > --zmq="tcp://127.0.0.1:5556 <tcp://127.0.0.1:5556>" > --collector-port=4711 > -n=none > -i=none > --pid-file=/var/run/nprobe-rh.pid > -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP > %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS > %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS > %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK > %IP_PROTOCOL_VERSION %FIRST_SWITCHED %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS" > --online-license-check > > NPROBE 2 - version: 8.3.180129-6049 > > --zmq="tcp://127.0.0.1:5557 <tcp://127.0.0.1:5557>" > --collector-port=4712 > -n=none > -i=none > --pid-file=/var/run/nprobe-tk.pid > -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP > %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS > %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS > %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK > %IP_PROTOCOL_VERSION %FIRST_SWITCHED %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS" > --online-license-check > > NTOPNG - version: 3.3.180129-4062 > > -G=/var/run/ntopng.pid > --interface="tcp://127.0.0.1:5556 <tcp://127.0.0.1:5556>" > --interface="tcp://127.0.0.1:5557 <tcp://127.0.0.1:5557>" > -F="mysql;localhost;ntop;flows;ntop;ntop" > -m="XX.XXX.XXX.XXX,YY.YYY.YYY.YYY/29,ZZZ.ZZZ.ZZZ.Z/24,AAAA:BBBB:CCCC:1::2/64,EEEE:FFFF:AAAA:2::252/64,BBBB:CCCC:DDDD:3::1/64" > -D=all > -p="/etc/ntopng/protos.txt" > --online-license-check > > > Next Issue: In the Debian packages there is a dependency issue. The current > versions could not be installed. > > pfring-dkms : depends on: pfring (= 7.1.0-1734) but 7.1.0-1736 is installed > > Matthias > > > > Am 10.02.2018 um 12:31 schrieb Joni Lee: >> Hello, >> This is my settings but didn't get IPv6(IPv4 works fine) flow >> nprobe.conf >> --zmq="tcp://*:5551" >> -i=none >> -n=none >> --collector-port=2055 >> -V=9 >> -T="%EXPORTER_IPV4_ADDRESS %EXPORTER_IPV6_ADDRESS %IP_PROTOCOL_VERSION >> %IPV4_SRC_ADDR %IPV6_SRC_ADDR %IPV4_DST_ADDR %IPV6_DST_ADDR %IPV4_NEXT_HOP >> %IPV6_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES >> %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS >> %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_MASK >> %IPV4_DST_MASK %IPV6_DST_MASK" >> ntopng.conf >> -i="tcp://127.0.0.1:5551" >> -i="tcp://127.0.0.1:5552" >> -G=/var/run/ntopng.pid >> -m=192.168.0.0/24 >> -m=172.16.0.0/16 >> Anything missed here ? >> Thanks in Advanced. > > > > -- > > MHC SoftWare GmbH > Fichtera 17 > 96274 Itzgrund/Germany > voice: +49-(0)9533-92006-0 > fax: +49-(0)9533-92006-6 > e-mail: i...@mhcsoftware.de <mailto:i...@mhcsoftware.de> > > HR Coburg: B2242 > Geschaeftsfuehrer: Matthias Henze > > > > _______________________________________________ > Ntop mailing list > Ntop@listgateway.unipi.it <mailto:Ntop@listgateway.unipi.it> > http://listgateway.unipi.it/mailman/listinfo/ntop > <http://listgateway.unipi.it/mailman/listinfo/ntop>
_______________________________________________ Ntop mailing list Ntop@listgateway.unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
