Did you switch NIC to NetFlow-Device?  Here is a snip
from a previous post which explains whye there is a
NetFlow-Device;

<...start...>
"why is the NetFlow-device interface created when you
turn on the 
plugin?"

Basically, there is a large, dynamic data structure in
ntop that holds all the information about a device,
collected, sniffed, etc. from the packets.

ntop creates one if it's merging data or multiples if
it's not merging data, one per "device".  So, ntop
creates another one of these structures to hold
the information it receives via netFlow packets when
it's acting as a netFlow receiver.  That way, all the
reporting logic just works... it doesn't know the
difference.

The structure has to be created before the first
netFlow packet is received, i.e. when we KNOW -- based
on the persistent settings for the plugin, or
your setting the port # -- that we'll be dealing with
inbound netFlow data.

-----Burton
<...end.....>


--- James Satterfield <[EMAIL PROTECTED]> wrote:
> Okay. So now I'm running 2.1.3 and I appear to have
> the same problem. Flows 
> are coming in on the correct port, but not making it
> into ntop. Is there 
> somewhere that I have to define flow sources?
> 
> James.
> 
> On Friday 11 October 2002 07:24 pm, James
> Satterfield wrote:
> > I'm running ntop 2.0.99rc2 from ports on FreeBSD
> 4.6.2-RELEASE. I have my
> > router configured to export flows to the ntop
> machine. I've enabled the
> > plugin and told it to listen on bge0. tcpdump
> shows that I am receiving the
> > flows from the router on the correct port. But
> looking at all the hosts
> > info, I'm obviously not seeing any netflows info.
> > Startup is
> > /usr/local/bin/ntop -d -L -i bge0 -w 3000 -W 3001
> -a
> > /var/log/ntop.access.log -u nobody -E
> >
> > I've seen a couple posts in the archives of people
> displaying a few lines
> > of stats for netflows, but I can't for the life of
> me find that info.
> >
> > Nothing out of the ordinary in my logs either.
> >
> > James.
> > _______________________________________________
> > Ntop mailing list
> > [EMAIL PROTECTED]
> > http://listgateway.unipi.it/mailman/listinfo/ntop
> 
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop


__________________________________________________
Do you Yahoo!?
Faith Hill - Exclusive Performances, Videos & More
http://faith.yahoo.com
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to