Please don't use HTML mail!! It use an enormous amount of space for nothing. Use plain text. Thanks. J.L. Blom
On Wed, 2008-04-23 at 13:58 +0100, Martin MacLeod-Brown wrote: > Hi Everyone > > I am trying to configure sflow data for ntop and am > getting some inconsistencies. > > I have configured the switch to send sflow data to the ntop server, > and created a virtual interface and enabled the sflow plugin. > > > > Looking at the plugin config I get the following, so I can see it is > getting data... > > > > > > ________________________________________ > > > > sFlow Interface Statistics > > Idx Type Speed Direction Status Promisc > Octets Unicasts > > Packets Multicasts > > Packets Broadcasts > > Packets Discards > > Packets Errors > > Packets Unkn Proto > > Packets > > 1 ethernet 1 Gbit full-duplex > Administrative > > Operational 0 1.3 GB > > 1.1 TB 5,750,268 > > 1,490,353,826 773,583 > > 671,611,933 3,433,457 > > 431,734,253 2,955,648 > > 65,985,391 0 > > 0 0 > > 2 ethernet 1 Gbit full-duplex > Administrative > > Operational 0 1.1 GB > > 1.1 TB 4,171,304 > > 1,490,257,979 686,390 > > 671,572,181 4,294,494 > > 431,771,855 2,986,639 > > 66,890,923 0 > > 0 0 > > 3 ethernet 1 Gbit full-duplex > Administrative > > Operational 0 671.2 MB > > 1.1 TB 2,452,093 > > 1,491,124,038 627,683 > > 671,613,945 1,679,020 > > 432,161,132 1,875,490 > > 70,210,369 0 > > 0 0 > > 4 ethernet 1 Gbit full-duplex > Administrative > > Operational 0 1.6 GB > > 1.1 TB 7,889,868 > > 1,489,428,992 715,768 > > 671,576,966 4,036,436 > > 431,055,316 2,746,984 > > 62,110,713 0 > > 0 0 > > 5 ethernet 1 Gbit full-duplex > Administrative > > Operational 0 1.4 GB > > 1.1 TB 6,469,199 > > 1,491,191,006 735,518 > > 671,558,468 3,862,393 > > 431,459,042 2,387,401 > > 64,660,482 0 > > 0 0 > > 6 ethernet 1 Gbit full-duplex > Administrative > > Operational 0 1.6 GB > > 1.1 TB 6,264,872 > > 1,489,585,779 675,211 > > 671,555,979 4,364,553 > > 431,226,164 4,331,969 > > 63,378,062 0 > > 0 0 > > 7 ethernet 1 Gbit full-duplex > Administrative > > Operational 0 1.2 GB > > 1.1 TB 6,126,406 > > 1,490,460,255 759,189 > > 671,866,424 3,582,068 > > 431,525,538 2,204,604 > > 66,356,404 0 > > 0 0 > > 8 ethernet 1 Gbit full-duplex > Administrative > > Operational 0 1.3 GB > > 1.1 TB 5,096,076 > > 1,491,203,940 665,851 > > 671,592,763 3,108,247 > > 432,176,292 3,255,351 > > 66,945,899 0 > > 0 0 > > 9 ethernet 1 Gbit full-duplex > Administrative > > Operational 0 37.2 MB > > 1.1 TB 0 > > 1,491,444,413 232,400 > > 671,982,128 0 > > 434,224,458 0 > > 72,706,684 2 > > 2 0 > > Note: Counters are represented as input value > > output value > > > > Flow Statistics > > Received Flows > > Flow Senders 163.119.66.47 [176 pkts] > > > > Number of Packets Received 176 > > Number of Packets with Bad Version 0 > > Number of Packets Processed 176 > > Number of Valid Flows Received 0 > > Number of v2 Flows Received 0 > > Number of v4 Flows Received 0 > > Number of v5 Flows Received 176 > > > > Discarded Flows > > Number of Flows with Bad Data > 0 > > Total Number of Flows Processed > 0 > > > > > > > > But on the traffic summary screen I get a different ‘total received’ > count 7 received, and 1 processed, where the plugin states 177 > received and 176 processed – why are these results different? See > below for traffic summary screen... > > > > Also – is there a way to disable the output for Eth0 as I am only > interested in the data from the remote switches that I will be setting > up? > > > > > > > > Global Traffic Statistics > > Network Interface(s) Name Device Type Speed Sampling > Rate MTU Header Address IPv6 Addresses > > eth0 eth0 Ethernet 0 > 1514 14 163.119.254.76 ::/0 > > DSLHB sFlow-device.2 Ethernet 250 > 1514 14 0.0.0.0 > > > > Sampling Since Tue Apr 15 16:19:26 2008 [7 days 21:44:59] > > > > > > Traffic Report for 'DSLHB' [switch] > > Packets Dropped (ntop) 0.0% 0 > > Total Received (ntop) 7 > > Total Packets Processed 1 > > Unicast 100.0% 1 > > Broadcast 0.0% 0 > > Multicast 0.0% 0 > > Shortest 94 bytes > > Average Size 48 bytes > > Longest 94 bytes > > <= 64 bytes 0.0% 0 > > 64 to 128 bytes 100.0% 1 > > 129 to 256 bytes 0.0% 0 > > 257 to 512 bytes 0.0% 0 > > 513 to 1024 bytes 0.0% 0 > > 1025 to 1518 bytes 0.0% 0 > > > 1518 bytes 0.0% 0 > > Packets too long [> 1514] 0.0% 0 > > Bad Packets (Checksum) 0.0% 0 > > > > Traffic Total 94 [1 Pkts] > > IP Traffic 0 [0 Pkts] > > Non IP Traffic 94 > > > > > > Network Load Actual 0.0 bps 0.0 Pkts/sec > > Last Minute 0.0 bps 0.0 Pkts/sec > > Last 5 Minutes 0.0 bps 0.0 Pkts/sec > > Peak 12.5 bps 0.0 Pkts/sec > > Average 0.0 bps 0.0 Pkts/sec > > > > > > > > > > I am presuming that I have configured something incorrectly as I have > no throughput or network load graphing output and everything under > the IP field (summary, traffic directions ) is also coming up blank. > > > > Can someone point me in the right direction to start getting some > meaningful output into ntop? > > > > Im willing to document the process step by step with screenshots if > someone has the patience to go through it with me (I have to document > it for our internal systems, so am happy to send copies to the list > for distribution or the wiki) – would be good to have an example of > the configuration process for other newbies... > > > > Any help gratefully received. > > > > Martin > > > > Martin Macleod-Brown | Infrastructure Engineer – Networks & Security > > Infrastructure Team > > London Business School | Regent's Park | London NW1 4SA | United > Kingdom > > Switchboard +44 (0)20 7000 7000 | Direct line +44 (0)20 7000 7772 | > Mobile +44 (0)796 690 7772 | Email [EMAIL PROTECTED] > > > > www.london.edu | London experience. World impact. > > > > Please consider the environment before printing this email > > > > > > > > ______________________________________________________________________ > > This email has been scanned by the MessageLabs Email Security System > on behalf of the London Business School community. > For more information please visit http://www.messagelabs.com/email > ______________________________________________________________________ > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
