this is from tcpdump 11:07:56.074390 IP 192.168.0.8.56305 > 192.168.0.4.2055: UDP, length: 72 11:08:18.114708 IP 192.168.0.8.56305 > 192.168.0.4.2055: UDP, length: 72
netstat -n -l udp 0 0 0.0.0.0:2055 0.0.0.0:*
the netflows page shows 0 packets and 0 traffic
192.168.0.8 is the cisco and 192.168.0.4 is the linux box.
From: "Burton M. Strauss III" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: <[EMAIL PROTECTED]> Subject: RE: [Ntop] netflow problem Date: Tue, 25 May 2004 08:02:20 -0500
Use a tool such as ethereal or tcpdump to verify the netflow packets are being received at the ntop host.
Check with netstat to make sure ntop is listening on the right port.
Then post more info... see HowTo Ask for Help in docs/FAQ - use the PR (Problem Report) form.
-----Burton
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mike
> O
> Sent: Tuesday, May 25, 2004 7:33 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Ntop] netflow problem
>
>
> Yes, the plugin is activated.
>
>
> -Mike
>
> >From: "Burton M. Strauss III" <[EMAIL PROTECTED]>
> >Reply-To: [EMAIL PROTECTED]
> >To: <[EMAIL PROTECTED]>
> >Subject: RE: [Ntop] netflow problem
> >Date: Tue, 25 May 2004 07:03:30 -0500
> >
> >Did you activate the plugin?
> >
> >-----Burton
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Behalf Of Mike
> > > Sent: Monday, May 24, 2004 8:13 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: [Ntop] netflow problem
> > >
> > >
> > > Hello, Im having problems capturing netflow data. I have set
> > > netflow up using the ntop-netflow.pdf file and I have switched
> > > the NIC to netflow but no data is passing.
> > >
> > > here is the web output:
> > > Report created on Mon May 24 21:15:23 2004 [ntop uptime: 1
> day 6:46:16]
> > > Generated by ntop v.3.0 SourceForge .tgz MT (SSL) [i686-pc-linux-gnu]
> > > Build: May 6 2004 15:03:13. Version: the CURRENT stable version
> > > Listening on [eth0,eth1,NetFlow-device] without a kernel
> > > (libpcap) filtering expression
> > > Web report active on interface NetFlow-device
> >_______________________________________________
> >Ntop mailing list
> >[EMAIL PROTECTED]
> >http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
