Netflow by default only counts data transmitted on an interface. Make sure the netflow confs on rtr will see the flows you're trying to see. Also look at the export confs and stats ans see if they look right. If you're using NAT on this router that's more tricky!.
Lastly try running as root to help rule out a perms issue. ----- Original Message ----- From: [email protected] <[email protected]> To: [email protected] <[email protected]> Sent: Tue Feb 10 01:13:33 2009 Subject: [Ntop] Ntop 3.3.9 + NetFlow: Local subnets missing Hi all, Many thanks to those who have participated in the developement of Ntop. It is awesome. I've been using Ntop(v3.3.9) + The NetFlow plugin(v4.1) for about a week now. I'm using only the netflow interface and I've defined my local subnets using --local-subnets. They appear under 'Local Networks' in About->Show Configuration. My problem is that under IP -> Summary -> Networks, there is no subnet data displayed. It says "Statistics for all Networks. No Data To Display (yet)". I see data in other sections of ntop that pertain to those subnets so I think there should be data displayed. I know that --local-subnets is used for determining pseudo-local hosts, but am I right in thinking that it will determine which subnets are displayed under IP->Summary->Networks? Similarly, I've tried to define a host cluster using Admin->Configure->Preferences. cluster.c9Internal=10.200.5.0/28. When I look at IP -> Summary -> Host Clusters I see the same 'No Data To Display' message displayed. Once again, there is definitely data flowing to/from hosts in this cluster. All other sections seem to be happily populated with data. Here are the options used in my ntop.conf --user ntop --daemon --db-file-path /usr/local/var/ntop --interface none --no-interface-merge --local-subnets 10.200.0.0/24,10.200.1.0/28,10.200.2.0/28,10.200.2.16/28,10.200.2.96/28,10.200.2.112/28,10.200.3.0/27,10.200.3.128/27,10.200.5.0/28,10.200.5.16/28 -L --http-server 3000 --no-mac --disable-schedyield I've specified a virtual address on the NetFlow interface, too. Also, I compiled from source. Running on RedHat Enterprise 5 Linux. I've looked all through the man-pages and doco I could find. I've also skimmed over the last few months of this mailing list and can't seem to find the same issue. There were a few posts in January from people who didn't have *any* data from their NetFlow interface displaying. A similarity I have with them is that my NetFlow traffic comes from a 7200 series Cisco router. Once again, thanks all for Ntop. If anyone is kind enough to help me out, many thanks in advance. :) Kind regards, James Greenhalgh _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
