Router config looks OK.  MAYBE set your version to 5 just to make sure.

On your ntop host - is there a ntop process listening on udp 9996?
Start there - or maybe try using the default port 2055.

It works great for me.  Sometimes I question the accuracy, but we have
compression on the WAN so it's hard to tell.  Every time I validate the
data it seems OK, but sometimes it will show 2Mb/s of throughput on a
384Kb/s link - I don't get that level of compression - not even close.
Overall though, it works pretty well.

Gary




-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Brian Loe
Sent: Wednesday, January 24, 2007 1:06 PM
To: [email protected]
Subject: [Ntop] flows

I don't know what my problem is but I have never been able to get ntop
to see flows coming from my router.

The router config:

ip flow-cache timeout active 1

interface Loopback0
  ip address 10.10.10.3 255.255.255.255

interface Serial6/0/0
  ip address 10.17.10.1 255.255.255.240
  ip route-cache flow

ip flow-export source Loopback0
ip flow-export destination 10.11.10.10 9996

The router IS exporting flows.

The ntop config (rcntop won't start - just comes back with "unused")
from the command line:

ntop -d -M --w3c -c -s -p /usr/share/ntop/protocol.list -a
/var/logs/ntop-web-log


I configure a new interface (though old ones keep coming back - I
think I could improve my situation a bit if I could start over fresh,
any ideas on that short of an uninstall/reinstall? - and change the
NIC to the netflow NIC. Never see anything...
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

===========================================================================





"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to