Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2018-03-19 Thread Enrico Kern 
I managed to get this updated now. It looks ok now with numbers but i had
to remove the upscale flag. With upscale flag it only shows a few kilobytes
instead of gigabits, so kind of reversed ;) But numbers seem to match
actual traffic now

On Wed, Mar 7, 2018 at 11:16 AM, Enrico Kern  wrote:

> no yet, will do later today. Thanks for the reminder. Wasnt aware new
> packages are already up
>
> On Wed, Mar 7, 2018 at 10:46 AM, Simone Mainardi 
> wrote:
>
>> Enrico, I was wondering if you had the chance to try new packages. You
>> can just run an upgrade of your package manager to get the latest version...
>>
>> Thanks
>>
>> Simone
>>
>>
>> On 19 Feb 2018, at 20:10, Enrico Kern  wrote:
>>
>> Sure. Tell me when new packages are out and i give it a go.
>>
>> Am 19.02.2018 19:39 schrieb "Simone Mainardi" :
>>
>> Enrico,
>>
>> We have made some fixes. Can you please hold a couple of hours (a new
>> build is in progress) and test again? If you still experience issues,
>> please consider sending us an sFlow capture or access to the machine.
>>
>> Thanks,
>>
>> Simone
>>
>> On 8 Feb 2018, at 12:30, Enrico Kern  wrote:
>>
>> Hey,
>>
>> the interface status page does not show any dropped packets or blocked
>> flows. Also --disable-sflow-upscale  doesnt help then it shows 1.79
>> TBit/s for hosts as example. Its like back to the arista problem we had
>> with 2.x which got patched after i provided a dump.
>>
>> On Thu, Feb 8, 2018 at 12:09 PM, Simone Mainardi 
>> wrote:
>>
>>> Enrico,
>>>
>>> Can you please verify, under the interface stats page, if there are
>>> sFlow drops reported?
>>>
>>> If you want to try and disable upscale on the latest 3.3, you can try
>>> with
>>>
>>> --disable-sflow-upscale | Ignore sFlow sampling rate (1:1 is
>>> used) and thus
>>>
>>>
>>> Simone
>>>
>>>
>>> On 8 Feb 2018, at 11:36, Enrico Kern  wrote:
>>>
>>> ok correction, even without upscale it shows wrong numbers. seems like i
>>> need to revert to an older version for now :(
>>>
>>> On Thu, Feb 8, 2018 at 11:32 AM, Enrico Kern 
>>> wrote:
>>>
 Same behavior now with the new upgrade from 3.1 to 3.3 ;) And im stil
 using upscale-traffic :(

 nprobe --upscale-traffic --zmq tcp://*:5557 -i none --collector-port
 6343 --verbose 2 --dump-stats -V9

 it shows me riddicolous traffic numbers now from my arista switch with
 speeds of 70Gbit/s on single ports that dont even do 1G and so on. if i
 remove upscale it looks better. Why does that behavior change every x
 versions? ;) Im not sure if anything is on top to correct at all in ntop
 any more.

 On Thu, Jun 8, 2017 at 11:51 AM, Enrico Kern >>> com> wrote:

> ah that did the trick. Thank you
>
> On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi  w
> rote:
>
>> Enrico,
>>
>> If I remember correctly, your Arista switches are sending sFlow. So
>> please try to add nProbe option* --upscale-traffic* that will adjust
>> the traffic on the basis of sFlow sampling rates.
>>
>> Simone
>>
>> On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern <
>> enrico.k...@glispamedia.com> wrote:
>>
>>> Hi all,
>>>
>>> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it
>>> shows absolute wrong traffic numbers. As example we have machines
>>> constantly doing 4 to 10 gbit/s and all it shows now for all hosts is 2
>>> kbit/s up to 1 Mbit/s thats all.
>>>
>>> We use normal nprobe where our arista switches send data too as it
>>> was before with 2.5
>>>
>>> nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2
>>> --dump-stats
>>>
>>>
>>> We had issues with 2 before with wrong traffic and arista switches
>>> which was solved after reporting that to the list.
>>>
>>> --
>>>
>>> Enrico Kern
>>>
>>> Lead System Engineer
>>>
>>> glispa GmbH
>>> Sonnenburger Straße 73
>>> 10437 Berlin, Germany
>>>
>>> tel: +49 30 5557130-17 <+49%2030%20555713017>
>>>
>>> mobile: +49 152 26814501
>>>
>>> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>>>
>>> __
>>> Sitz Berlin, AG Charlottenburg HRB 114678B
>>>
>>>
>>> ___
>>> Ntop mailing list
>>> Ntop@listgateway.unipi.it
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>>
>>
>> ___
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
>
>
> --
>
> Enrico Kern
>
> Lead System Engineer
>
> glispa GmbH
> Sonnenburger Straße 73
> 10437 Berlin, Germany
>
> tel: +49 30 5557130-17 <+49%2030%20555713017>
>
> mobile: +49 152 26814501
>
> skype: flyersaenrico.k...@glispamedia.comwww.glispa.c

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2018-03-07 Thread Enrico Kern 
no yet, will do later today. Thanks for the reminder. Wasnt aware new
packages are already up

On Wed, Mar 7, 2018 at 10:46 AM, Simone Mainardi  wrote:

> Enrico, I was wondering if you had the chance to try new packages. You can
> just run an upgrade of your package manager to get the latest version...
>
> Thanks
>
> Simone
>
>
> On 19 Feb 2018, at 20:10, Enrico Kern  wrote:
>
> Sure. Tell me when new packages are out and i give it a go.
>
> Am 19.02.2018 19:39 schrieb "Simone Mainardi" :
>
> Enrico,
>
> We have made some fixes. Can you please hold a couple of hours (a new
> build is in progress) and test again? If you still experience issues,
> please consider sending us an sFlow capture or access to the machine.
>
> Thanks,
>
> Simone
>
> On 8 Feb 2018, at 12:30, Enrico Kern  wrote:
>
> Hey,
>
> the interface status page does not show any dropped packets or blocked
> flows. Also --disable-sflow-upscale  doesnt help then it shows 1.79
> TBit/s for hosts as example. Its like back to the arista problem we had
> with 2.x which got patched after i provided a dump.
>
> On Thu, Feb 8, 2018 at 12:09 PM, Simone Mainardi 
> wrote:
>
>> Enrico,
>>
>> Can you please verify, under the interface stats page, if there are sFlow
>> drops reported?
>>
>> If you want to try and disable upscale on the latest 3.3, you can try
>> with
>>
>> --disable-sflow-upscale | Ignore sFlow sampling rate (1:1 is
>> used) and thus
>>
>>
>> Simone
>>
>>
>> On 8 Feb 2018, at 11:36, Enrico Kern  wrote:
>>
>> ok correction, even without upscale it shows wrong numbers. seems like i
>> need to revert to an older version for now :(
>>
>> On Thu, Feb 8, 2018 at 11:32 AM, Enrico Kern 
>> wrote:
>>
>>> Same behavior now with the new upgrade from 3.1 to 3.3 ;) And im stil
>>> using upscale-traffic :(
>>>
>>> nprobe --upscale-traffic --zmq tcp://*:5557 -i none --collector-port
>>> 6343 --verbose 2 --dump-stats -V9
>>>
>>> it shows me riddicolous traffic numbers now from my arista switch with
>>> speeds of 70Gbit/s on single ports that dont even do 1G and so on. if i
>>> remove upscale it looks better. Why does that behavior change every x
>>> versions? ;) Im not sure if anything is on top to correct at all in ntop
>>> any more.
>>>
>>> On Thu, Jun 8, 2017 at 11:51 AM, Enrico Kern >> com> wrote:
>>>
 ah that did the trick. Thank you

 On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi  w
 rote:

> Enrico,
>
> If I remember correctly, your Arista switches are sending sFlow. So
> please try to add nProbe option* --upscale-traffic* that will adjust
> the traffic on the basis of sFlow sampling rates.
>
> Simone
>
> On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern  com> wrote:
>
>> Hi all,
>>
>> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it
>> shows absolute wrong traffic numbers. As example we have machines
>> constantly doing 4 to 10 gbit/s and all it shows now for all hosts is 2
>> kbit/s up to 1 Mbit/s thats all.
>>
>> We use normal nprobe where our arista switches send data too as it
>> was before with 2.5
>>
>> nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2
>> --dump-stats
>>
>>
>> We had issues with 2 before with wrong traffic and arista switches
>> which was solved after reporting that to the list.
>>
>> --
>>
>> Enrico Kern
>>
>> Lead System Engineer
>>
>> glispa GmbH
>> Sonnenburger Straße 73
>> 10437 Berlin, Germany
>>
>> tel: +49 30 5557130-17 <+49%2030%20555713017>
>>
>> mobile: +49 152 26814501
>>
>> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>>
>> __
>> Sitz Berlin, AG Charlottenburg HRB 114678B
>>
>>
>> ___
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
>
> ___
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>



 --

 Enrico Kern

 Lead System Engineer

 glispa GmbH
 Sonnenburger Straße 73
 10437 Berlin, Germany

 tel: +49 30 5557130-17 <+49%2030%20555713017>

 mobile: +49 152 26814501

 skype: flyersaenrico.k...@glispamedia.comwww.glispa.com

 __
 Sitz Berlin, AG Charlottenburg HRB 114678B


>>>
>>>
>>> --
>>>
>>> Enrico Kern
>>> *Director of System Engineering*
>>>
>>> *T* +49 (0) 30 555713017 <+49%2030%20555713017>  | *M *+49 (0)152
>>> 26814501 <+49%201522%206814501>
>>> *E*  enrico.k...@glispa.com |  Skype flyersa |  LinkedIn View my Profile
>>> 
>>>
>>>
>>>  
>>>
>>>

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2018-03-07 Thread Simone Mainardi 
Enrico, I was wondering if you had the chance to try new packages. You can just 
run an upgrade of your package manager to get the latest version...

Thanks

Simone

> On 19 Feb 2018, at 20:10, Enrico Kern  wrote:
> 
> Sure. Tell me when new packages are out and i give it a go.
> 
> Am 19.02.2018 19:39 schrieb "Simone Mainardi"  >:
> Enrico,
> 
> We have made some fixes. Can you please hold a couple of hours (a new build 
> is in progress) and test again? If you still experience issues, please 
> consider sending us an sFlow capture or access to the machine.
> 
> Thanks,
> 
> Simone
> 
>> On 8 Feb 2018, at 12:30, Enrico Kern > > wrote:
>> 
>> Hey,
>> 
>> the interface status page does not show any dropped packets or blocked 
>> flows. Also --disable-sflow-upscale  doesnt help then it shows 1.79 TBit/s 
>> for hosts as example. Its like back to the arista problem we had with 2.x 
>> which got patched after i provided a dump.
>> 
>> On Thu, Feb 8, 2018 at 12:09 PM, Simone Mainardi > > wrote:
>> Enrico,
>> 
>> Can you please verify, under the interface stats page, if there are sFlow 
>> drops reported? 
>> 
>> If you want to try and disable upscale on the latest 3.3, you can try with 
>> 
>> --disable-sflow-upscale | Ignore sFlow sampling rate (1:1 is 
>> used) and thus
>> 
>> 
>> Simone
>> 
>> 
>>> On 8 Feb 2018, at 11:36, Enrico Kern >> > wrote:
>>> 
>>> ok correction, even without upscale it shows wrong numbers. seems like i 
>>> need to revert to an older version for now :(
>>> 
>>> On Thu, Feb 8, 2018 at 11:32 AM, Enrico Kern >> > wrote:
>>> Same behavior now with the new upgrade from 3.1 to 3.3 ;) And im stil using 
>>> upscale-traffic :(
>>> 
>>> nprobe --upscale-traffic --zmq tcp://*:5557 <> -i none --collector-port 
>>> 6343 --verbose 2 --dump-stats -V9
>>> 
>>> it shows me riddicolous traffic numbers now from my arista switch with 
>>> speeds of 70Gbit/s on single ports that dont even do 1G and so on. if i 
>>> remove upscale it looks better. Why does that behavior change every x 
>>> versions? ;) Im not sure if anything is on top to correct at all in ntop 
>>> any more.
>>> 
>>> On Thu, Jun 8, 2017 at 11:51 AM, Enrico Kern >> > wrote:
>>> ah that did the trick. Thank you
>>> 
>>> On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi >> > wrote:
>>> Enrico,
>>> 
>>> If I remember correctly, your Arista switches are sending sFlow. So please 
>>> try to add nProbe option --upscale-traffic that will adjust the traffic on 
>>> the basis of sFlow sampling rates.
>>> 
>>> Simone
>>> 
>>> On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern >> > wrote:
>>> Hi all,
>>> 
>>> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows 
>>> absolute wrong traffic numbers. As example we have machines constantly 
>>> doing 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 1 
>>> Mbit/s thats all.
>>> 
>>> We use normal nprobe where our arista switches send data too as it was 
>>> before with 2.5
>>> 
>>> nprobe --zmq tcp://*:5557 <> -i none --collector-port 6343 --verbose 2 
>>> --dump-stats
>>> 
>>> 
>>> We had issues with 2 before with wrong traffic and arista switches which 
>>> was solved after reporting that to the list.
>>> 
>>> -- 
>>> 
>>> Enrico Kern
>>> 
>>> Lead System Engineer
>>> 
>>> glispa GmbH
>>> Sonnenburger Straße 73
>>> 10437 Berlin, Germany
>>> 
>>> tel: +49 30 5557130-17 
>>> mobile: +49 152 26814501
>>> skype: flyersa
>>> enrico.k...@glispamedia.com 
>>> www.glispa.com 
>>> 
>>> __
>>> Sitz Berlin, AG Charlottenburg HRB 114678B
>>> 
>>> ___
>>> Ntop mailing list
>>> Ntop@listgateway.unipi.it 
>>> http://listgateway.unipi.it/mailman/listinfo/ntop 
>>> 
>>> 
>>> 
>>> ___
>>> Ntop mailing list
>>> Ntop@listgateway.unipi.it 
>>> http://listgateway.unipi.it/mailman/listinfo/ntop 
>>> 
>>> 
>>> 
>>> 
>>> -- 
>>> 
>>> Enrico Kern
>>> 
>>> Lead System Engineer
>>> 
>>> glispa GmbH
>>> Sonnenburger Straße 73
>>> 10437 Berlin, Germany
>>> 
>>> tel: +49 30 5557130-17 
>>> mobile: +49 152 26814501
>>> skype: flyersa
>>> enrico.k...@glispamedia.com 
>>> www.glispa.com 
>>> 
>>> __
>>> Sitz Berlin, AG Charlottenburg HRB 114678B
>>> 
>>> 
>>> 
>>> -- 
>>> 
>>> Enrico Kern
>>> Director of System Engineering
>>> 
>>> T +49 (0) 30 555713017   | M +49 (0)152 26814501 
>>> 
>>> E  enrico.k...@g

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2018-02-19 Thread Enrico Kern 
Sure. Tell me when new packages are out and i give it a go.

Am 19.02.2018 19:39 schrieb "Simone Mainardi" :

Enrico,

We have made some fixes. Can you please hold a couple of hours (a new build
is in progress) and test again? If you still experience issues, please
consider sending us an sFlow capture or access to the machine.

Thanks,

Simone

On 8 Feb 2018, at 12:30, Enrico Kern  wrote:

Hey,

the interface status page does not show any dropped packets or blocked
flows. Also --disable-sflow-upscale  doesnt help then it shows 1.79 TBit/s
for hosts as example. Its like back to the arista problem we had with 2.x
which got patched after i provided a dump.

On Thu, Feb 8, 2018 at 12:09 PM, Simone Mainardi  wrote:

> Enrico,
>
> Can you please verify, under the interface stats page, if there are sFlow
> drops reported?
>
> If you want to try and disable upscale on the latest 3.3, you can try with
>
> --disable-sflow-upscale | Ignore sFlow sampling rate (1:1 is
> used) and thus
>
>
> Simone
>
>
> On 8 Feb 2018, at 11:36, Enrico Kern  wrote:
>
> ok correction, even without upscale it shows wrong numbers. seems like i
> need to revert to an older version for now :(
>
> On Thu, Feb 8, 2018 at 11:32 AM, Enrico Kern 
> wrote:
>
>> Same behavior now with the new upgrade from 3.1 to 3.3 ;) And im stil
>> using upscale-traffic :(
>>
>> nprobe --upscale-traffic --zmq tcp://*:5557 -i none --collector-port
>> 6343 --verbose 2 --dump-stats -V9
>>
>> it shows me riddicolous traffic numbers now from my arista switch with
>> speeds of 70Gbit/s on single ports that dont even do 1G and so on. if i
>> remove upscale it looks better. Why does that behavior change every x
>> versions? ;) Im not sure if anything is on top to correct at all in ntop
>> any more.
>>
>> On Thu, Jun 8, 2017 at 11:51 AM, Enrico Kern > > wrote:
>>
>>> ah that did the trick. Thank you
>>>
>>> On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi  w
>>> rote:
>>>
 Enrico,

 If I remember correctly, your Arista switches are sending sFlow. So
 please try to add nProbe option* --upscale-traffic* that will adjust
 the traffic on the basis of sFlow sampling rates.

 Simone

 On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern >>> com> wrote:

> Hi all,
>
> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows
> absolute wrong traffic numbers. As example we have machines constantly
> doing 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 
> 1
> Mbit/s thats all.
>
> We use normal nprobe where our arista switches send data too as it was
> before with 2.5
>
> nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2
> --dump-stats
>
>
> We had issues with 2 before with wrong traffic and arista switches
> which was solved after reporting that to the list.
>
> --
>
> Enrico Kern
>
> Lead System Engineer
>
> glispa GmbH
> Sonnenburger Straße 73
> 10437 Berlin, Germany
>
> tel: +49 30 5557130-17 <+49%2030%20555713017>
>
> mobile: +49 152 26814501
>
> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>
> __
> Sitz Berlin, AG Charlottenburg HRB 114678B
>
>
> ___
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>


 ___
 Ntop mailing list
 Ntop@listgateway.unipi.it
 http://listgateway.unipi.it/mailman/listinfo/ntop

>>>
>>>
>>>
>>> --
>>>
>>> Enrico Kern
>>>
>>> Lead System Engineer
>>>
>>> glispa GmbH
>>> Sonnenburger Straße 73
>>> 10437 Berlin, Germany
>>>
>>> tel: +49 30 5557130-17 <+49%2030%20555713017>
>>>
>>> mobile: +49 152 26814501
>>>
>>> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>>>
>>> __
>>> Sitz Berlin, AG Charlottenburg HRB 114678B
>>>
>>>
>>
>>
>> --
>>
>> Enrico Kern
>> *Director of System Engineering*
>>
>> *T* +49 (0) 30 555713017 <+49%2030%20555713017>  | *M *+49 (0)152
>> 26814501 <+49%201522%206814501>
>> *E*  enrico.k...@glispa.com |  Skype flyersa |  LinkedIn View my Profile
>> 
>>
>>
>>  
>>
>> *Glispa GmbH* | Berlin Office
>> Sonnenburger Straße 73
>> 
>> 10437 Berlin
>>

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2018-02-19 Thread Simone Mainardi 
Enrico,

We have made some fixes. Can you please hold a couple of hours (a new build is 
in progress) and test again? If you still experience issues, please consider 
sending us an sFlow capture or access to the machine.

Thanks,

Simone

> On 8 Feb 2018, at 12:30, Enrico Kern  wrote:
> 
> Hey,
> 
> the interface status page does not show any dropped packets or blocked flows. 
> Also --disable-sflow-upscale  doesnt help then it shows 1.79 TBit/s for hosts 
> as example. Its like back to the arista problem we had with 2.x which got 
> patched after i provided a dump.
> 
> On Thu, Feb 8, 2018 at 12:09 PM, Simone Mainardi  > wrote:
> Enrico,
> 
> Can you please verify, under the interface stats page, if there are sFlow 
> drops reported? 
> 
> If you want to try and disable upscale on the latest 3.3, you can try with 
> 
> --disable-sflow-upscale | Ignore sFlow sampling rate (1:1 is 
> used) and thus
> 
> 
> Simone
> 
> 
>> On 8 Feb 2018, at 11:36, Enrico Kern > > wrote:
>> 
>> ok correction, even without upscale it shows wrong numbers. seems like i 
>> need to revert to an older version for now :(
>> 
>> On Thu, Feb 8, 2018 at 11:32 AM, Enrico Kern > > wrote:
>> Same behavior now with the new upgrade from 3.1 to 3.3 ;) And im stil using 
>> upscale-traffic :(
>> 
>> nprobe --upscale-traffic --zmq tcp://*:5557 <> -i none --collector-port 6343 
>> --verbose 2 --dump-stats -V9
>> 
>> it shows me riddicolous traffic numbers now from my arista switch with 
>> speeds of 70Gbit/s on single ports that dont even do 1G and so on. if i 
>> remove upscale it looks better. Why does that behavior change every x 
>> versions? ;) Im not sure if anything is on top to correct at all in ntop any 
>> more.
>> 
>> On Thu, Jun 8, 2017 at 11:51 AM, Enrico Kern > > wrote:
>> ah that did the trick. Thank you
>> 
>> On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi > > wrote:
>> Enrico,
>> 
>> If I remember correctly, your Arista switches are sending sFlow. So please 
>> try to add nProbe option --upscale-traffic that will adjust the traffic on 
>> the basis of sFlow sampling rates.
>> 
>> Simone
>> 
>> On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern > > wrote:
>> Hi all,
>> 
>> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows 
>> absolute wrong traffic numbers. As example we have machines constantly doing 
>> 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 1 Mbit/s 
>> thats all.
>> 
>> We use normal nprobe where our arista switches send data too as it was 
>> before with 2.5
>> 
>> nprobe --zmq tcp://*:5557 <> -i none --collector-port 6343 --verbose 2 
>> --dump-stats
>> 
>> 
>> We had issues with 2 before with wrong traffic and arista switches which was 
>> solved after reporting that to the list.
>> 
>> -- 
>> 
>> Enrico Kern
>> 
>> Lead System Engineer
>> 
>> glispa GmbH
>> Sonnenburger Straße 73
>> 10437 Berlin, Germany
>> 
>> tel: +49 30 5557130-17 
>> mobile: +49 152 26814501
>> skype: flyersa
>> enrico.k...@glispamedia.com 
>> www.glispa.com 
>> 
>> __
>> Sitz Berlin, AG Charlottenburg HRB 114678B
>> 
>> ___
>> Ntop mailing list
>> Ntop@listgateway.unipi.it 
>> http://listgateway.unipi.it/mailman/listinfo/ntop 
>> 
>> 
>> 
>> ___
>> Ntop mailing list
>> Ntop@listgateway.unipi.it 
>> http://listgateway.unipi.it/mailman/listinfo/ntop 
>> 
>> 
>> 
>> 
>> -- 
>> 
>> Enrico Kern
>> 
>> Lead System Engineer
>> 
>> glispa GmbH
>> Sonnenburger Straße 73
>> 10437 Berlin, Germany
>> 
>> tel: +49 30 5557130-17 
>> mobile: +49 152 26814501
>> skype: flyersa
>> enrico.k...@glispamedia.com 
>> www.glispa.com 
>> 
>> __
>> Sitz Berlin, AG Charlottenburg HRB 114678B
>> 
>> 
>> 
>> -- 
>> 
>> Enrico Kern
>> Director of System Engineering
>> 
>> T +49 (0) 30 555713017   | M +49 (0)152 26814501 
>> 
>> E  enrico.k...@glispa.com  |  Skype flyersa | 
>>  LinkedIn View my Profile  
>> 
>> 
>>   
>> 
>> Glispa GmbH | Berlin Office
>> Sonnenburger Straße 73 
>> 
>> 10437 Berlin  
>>

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2018-02-08 Thread Enrico Kern 
Hey,

the interface status page does not show any dropped packets or blocked
flows. Also --disable-sflow-upscale  doesnt help then it shows 1.79 TBit/s
for hosts as example. Its like back to the arista problem we had with 2.x
which got patched after i provided a dump.

On Thu, Feb 8, 2018 at 12:09 PM, Simone Mainardi  wrote:

> Enrico,
>
> Can you please verify, under the interface stats page, if there are sFlow
> drops reported?
>
> If you want to try and disable upscale on the latest 3.3, you can try with
>
> --disable-sflow-upscale | Ignore sFlow sampling rate (1:1 is
> used) and thus
>
>
> Simone
>
>
> On 8 Feb 2018, at 11:36, Enrico Kern  wrote:
>
> ok correction, even without upscale it shows wrong numbers. seems like i
> need to revert to an older version for now :(
>
> On Thu, Feb 8, 2018 at 11:32 AM, Enrico Kern 
> wrote:
>
>> Same behavior now with the new upgrade from 3.1 to 3.3 ;) And im stil
>> using upscale-traffic :(
>>
>> nprobe --upscale-traffic --zmq tcp://*:5557 -i none --collector-port
>> 6343 --verbose 2 --dump-stats -V9
>>
>> it shows me riddicolous traffic numbers now from my arista switch with
>> speeds of 70Gbit/s on single ports that dont even do 1G and so on. if i
>> remove upscale it looks better. Why does that behavior change every x
>> versions? ;) Im not sure if anything is on top to correct at all in ntop
>> any more.
>>
>> On Thu, Jun 8, 2017 at 11:51 AM, Enrico Kern > > wrote:
>>
>>> ah that did the trick. Thank you
>>>
>>> On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi  w
>>> rote:
>>>
 Enrico,

 If I remember correctly, your Arista switches are sending sFlow. So
 please try to add nProbe option* --upscale-traffic* that will adjust
 the traffic on the basis of sFlow sampling rates.

 Simone

 On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern >>> com> wrote:

> Hi all,
>
> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows
> absolute wrong traffic numbers. As example we have machines constantly
> doing 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 
> 1
> Mbit/s thats all.
>
> We use normal nprobe where our arista switches send data too as it was
> before with 2.5
>
> nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2
> --dump-stats
>
>
> We had issues with 2 before with wrong traffic and arista switches
> which was solved after reporting that to the list.
>
> --
>
> Enrico Kern
>
> Lead System Engineer
>
> glispa GmbH
> Sonnenburger Straße 73
> 10437 Berlin, Germany
>
> tel: +49 30 5557130-17 <+49%2030%20555713017>
>
> mobile: +49 152 26814501
>
> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>
> __
> Sitz Berlin, AG Charlottenburg HRB 114678B
>
>
> ___
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>


 ___
 Ntop mailing list
 Ntop@listgateway.unipi.it
 http://listgateway.unipi.it/mailman/listinfo/ntop

>>>
>>>
>>>
>>> --
>>>
>>> Enrico Kern
>>>
>>> Lead System Engineer
>>>
>>> glispa GmbH
>>> Sonnenburger Straße 73
>>> 10437 Berlin, Germany
>>>
>>> tel: +49 30 5557130-17 <+49%2030%20555713017>
>>>
>>> mobile: +49 152 26814501
>>>
>>> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>>>
>>> __
>>> Sitz Berlin, AG Charlottenburg HRB 114678B
>>>
>>>
>>
>>
>> --
>>
>> Enrico Kern
>> *Director of System Engineering*
>>
>> *T* +49 (0) 30 555713017 <+49%2030%20555713017>  | *M *+49 (0)152
>> 26814501 <+49%201522%206814501>
>> *E*  enrico.k...@glispa.com |  Skype flyersa |  LinkedIn View my Profile
>> 
>>
>>
>>  
>>
>> *Glispa GmbH* | Berlin Office
>> Sonnenburger Straße 73
>> 
>> 10437 Berlin
>> 
>> |
>> 
>>  Germany
>>

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2018-02-08 Thread Simone Mainardi 
Enrico,

Can you please verify, under the interface stats page, if there are sFlow drops 
reported? 

If you want to try and disable upscale on the latest 3.3, you can try with 

--disable-sflow-upscale | Ignore sFlow sampling rate (1:1 is used) 
and thus


Simone

> On 8 Feb 2018, at 11:36, Enrico Kern  wrote:
> 
> ok correction, even without upscale it shows wrong numbers. seems like i need 
> to revert to an older version for now :(
> 
> On Thu, Feb 8, 2018 at 11:32 AM, Enrico Kern  > wrote:
> Same behavior now with the new upgrade from 3.1 to 3.3 ;) And im stil using 
> upscale-traffic :(
> 
> nprobe --upscale-traffic --zmq tcp://*:5557 -i none --collector-port 6343 
> --verbose 2 --dump-stats -V9
> 
> it shows me riddicolous traffic numbers now from my arista switch with speeds 
> of 70Gbit/s on single ports that dont even do 1G and so on. if i remove 
> upscale it looks better. Why does that behavior change every x versions? ;) 
> Im not sure if anything is on top to correct at all in ntop any more.
> 
> On Thu, Jun 8, 2017 at 11:51 AM, Enrico Kern  > wrote:
> ah that did the trick. Thank you
> 
> On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi  > wrote:
> Enrico,
> 
> If I remember correctly, your Arista switches are sending sFlow. So please 
> try to add nProbe option --upscale-traffic that will adjust the traffic on 
> the basis of sFlow sampling rates.
> 
> Simone
> 
> On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern  > wrote:
> Hi all,
> 
> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows 
> absolute wrong traffic numbers. As example we have machines constantly doing 
> 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 1 Mbit/s 
> thats all.
> 
> We use normal nprobe where our arista switches send data too as it was before 
> with 2.5
> 
> nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2 
> --dump-stats
> 
> 
> We had issues with 2 before with wrong traffic and arista switches which was 
> solved after reporting that to the list.
> 
> -- 
> 
> Enrico Kern
> 
> Lead System Engineer
> 
> glispa GmbH
> Sonnenburger Straße 73
> 10437 Berlin, Germany
> 
> tel: +49 30 5557130-17 
> mobile: +49 152 26814501
> skype: flyersa
> enrico.k...@glispamedia.com 
> www.glispa.com 
> 
> __
> Sitz Berlin, AG Charlottenburg HRB 114678B
> 
> ___
> Ntop mailing list
> Ntop@listgateway.unipi.it 
> http://listgateway.unipi.it/mailman/listinfo/ntop 
> 
> 
> 
> ___
> Ntop mailing list
> Ntop@listgateway.unipi.it 
> http://listgateway.unipi.it/mailman/listinfo/ntop 
> 
> 
> 
> 
> -- 
> 
> Enrico Kern
> 
> Lead System Engineer
> 
> glispa GmbH
> Sonnenburger Straße 73
> 10437 Berlin, Germany
> 
> tel: +49 30 5557130-17 
> mobile: +49 152 26814501
> skype: flyersa
> enrico.k...@glispamedia.com 
> www.glispa.com 
> 
> __
> Sitz Berlin, AG Charlottenburg HRB 114678B
> 
> 
> 
> -- 
> 
> Enrico Kern
> Director of System Engineering
> 
> T +49 (0) 30 555713017   | M +49 (0)152 26814501 
> 
> E  enrico.k...@glispa.com  |  Skype flyersa |  
> LinkedIn View my Profile  
> 
> 
>   
> 
> Glispa GmbH | Berlin Office
> Sonnenburger Straße 73 
> 
> 10437 Berlin  
> |
>  
> 
>  Germany 
> 
> 
> Managing Director Din Karol-Gavish
> Registered in Berlin
> AG Charlottenburg | 
>

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2018-02-08 Thread Enrico Kern 
ok correction, even without upscale it shows wrong numbers. seems like i
need to revert to an older version for now :(

On Thu, Feb 8, 2018 at 11:32 AM, Enrico Kern  wrote:

> Same behavior now with the new upgrade from 3.1 to 3.3 ;) And im stil
> using upscale-traffic :(
>
> nprobe --upscale-traffic --zmq tcp://*:5557 -i none --collector-port 6343
> --verbose 2 --dump-stats -V9
>
> it shows me riddicolous traffic numbers now from my arista switch with
> speeds of 70Gbit/s on single ports that dont even do 1G and so on. if i
> remove upscale it looks better. Why does that behavior change every x
> versions? ;) Im not sure if anything is on top to correct at all in ntop
> any more.
>
> On Thu, Jun 8, 2017 at 11:51 AM, Enrico Kern 
> wrote:
>
>> ah that did the trick. Thank you
>>
>> On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi 
>> wrote:
>>
>>> Enrico,
>>>
>>> If I remember correctly, your Arista switches are sending sFlow. So
>>> please try to add nProbe option* --upscale-traffic* that will adjust
>>> the traffic on the basis of sFlow sampling rates.
>>>
>>> Simone
>>>
>>> On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern <
>>> enrico.k...@glispamedia.com> wrote:
>>>
 Hi all,

 yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows
 absolute wrong traffic numbers. As example we have machines constantly
 doing 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 1
 Mbit/s thats all.

 We use normal nprobe where our arista switches send data too as it was
 before with 2.5

 nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2
 --dump-stats


 We had issues with 2 before with wrong traffic and arista switches
 which was solved after reporting that to the list.

 --

 Enrico Kern

 Lead System Engineer

 glispa GmbH
 Sonnenburger Straße 73
 10437 Berlin, Germany

 tel: +49 30 5557130-17 <+49%2030%20555713017>

 mobile: +49 152 26814501

 skype: flyersaenrico.k...@glispamedia.comwww.glispa.com

 __
 Sitz Berlin, AG Charlottenburg HRB 114678B


 ___
 Ntop mailing list
 Ntop@listgateway.unipi.it
 http://listgateway.unipi.it/mailman/listinfo/ntop

>>>
>>>
>>> ___
>>> Ntop mailing list
>>> Ntop@listgateway.unipi.it
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>>
>>
>>
>> --
>>
>> Enrico Kern
>>
>> Lead System Engineer
>>
>> glispa GmbH
>> Sonnenburger Straße 73
>> 10437 Berlin, Germany
>>
>> tel: +49 30 5557130-17 <+49%2030%20555713017>
>>
>> mobile: +49 152 26814501
>>
>> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>>
>> __
>> Sitz Berlin, AG Charlottenburg HRB 114678B
>>
>>
>
>
> --
>
> Enrico Kern
> *Director of System Engineering*
>
> *T* +49 (0) 30 555713017 <+49%2030%20555713017>  | *M *+49 (0)152 26814501
> <+49%201522%206814501>
> *E*  enrico.k...@glispa.com |  Skype flyersa |  LinkedIn View my Profile
> 
>
>
>  
>
> *Glispa GmbH* | Berlin Office
> Sonnenburger Straße 73
> 
> 10437 Berlin
> 
> |
> 
>  Germany
> 
>
> Managing Director Din Karol-Gavish
> Registered in Berlin
> AG Charlottenburg |
> 
>  HRB
> 114678B
> –
>



-- 

Enrico Kern
*Director of System Engineering*

*T* +49 (0) 30 555713017 <+49%2030%20555713017>  | *M *+49 (0)152 26814501
<+49%201522%206814501>
*E*  enrico.k...@glispa.com |  Skype flyersa |  LinkedIn View my Profile



 

*Glispa GmbH* | Berlin Office
Sonnenburg

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2018-02-08 Thread Enrico Kern 
Same behavior now with the new upgrade from 3.1 to 3.3 ;) And im stil using
upscale-traffic :(

nprobe --upscale-traffic --zmq tcp://*:5557 -i none --collector-port 6343
--verbose 2 --dump-stats -V9

it shows me riddicolous traffic numbers now from my arista switch with
speeds of 70Gbit/s on single ports that dont even do 1G and so on. if i
remove upscale it looks better. Why does that behavior change every x
versions? ;) Im not sure if anything is on top to correct at all in ntop
any more.

On Thu, Jun 8, 2017 at 11:51 AM, Enrico Kern 
wrote:

> ah that did the trick. Thank you
>
> On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi 
> wrote:
>
>> Enrico,
>>
>> If I remember correctly, your Arista switches are sending sFlow. So
>> please try to add nProbe option* --upscale-traffic* that will adjust the
>> traffic on the basis of sFlow sampling rates.
>>
>> Simone
>>
>> On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern > > wrote:
>>
>>> Hi all,
>>>
>>> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows
>>> absolute wrong traffic numbers. As example we have machines constantly
>>> doing 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 1
>>> Mbit/s thats all.
>>>
>>> We use normal nprobe where our arista switches send data too as it was
>>> before with 2.5
>>>
>>> nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2
>>> --dump-stats
>>>
>>>
>>> We had issues with 2 before with wrong traffic and arista switches which
>>> was solved after reporting that to the list.
>>>
>>> --
>>>
>>> Enrico Kern
>>>
>>> Lead System Engineer
>>>
>>> glispa GmbH
>>> Sonnenburger Straße 73
>>> 10437 Berlin, Germany
>>>
>>> tel: +49 30 5557130-17 <+49%2030%20555713017>
>>>
>>> mobile: +49 152 26814501
>>>
>>> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>>>
>>> __
>>> Sitz Berlin, AG Charlottenburg HRB 114678B
>>>
>>>
>>> ___
>>> Ntop mailing list
>>> Ntop@listgateway.unipi.it
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>>
>>
>> ___
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
>
>
> --
>
> Enrico Kern
>
> Lead System Engineer
>
> glispa GmbH
> Sonnenburger Straße 73
> 10437 Berlin, Germany
>
> tel: +49 30 5557130-17 <+49%2030%20555713017>
>
> mobile: +49 152 26814501
>
> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>
> __
> Sitz Berlin, AG Charlottenburg HRB 114678B
>
>


-- 

Enrico Kern
*Director of System Engineering*

*T* +49 (0) 30 555713017 <+49%2030%20555713017>  | *M *+49 (0)152 26814501
<+49%201522%206814501>
*E*  enrico.k...@glispa.com |  Skype flyersa |  LinkedIn View my Profile



 

*Glispa GmbH* | Berlin Office
Sonnenburger Straße 73

10437 Berlin

|

 Germany


Managing Director Din Karol-Gavish
Registered in Berlin
AG Charlottenburg |

HRB
114678B
–
___
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2017-06-08 Thread Enrico Kern 
ah that did the trick. Thank you

On Thu, Jun 8, 2017 at 11:48 AM, Simone Mainardi  wrote:

> Enrico,
>
> If I remember correctly, your Arista switches are sending sFlow. So please
> try to add nProbe option* --upscale-traffic* that will adjust the traffic
> on the basis of sFlow sampling rates.
>
> Simone
>
> On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern 
> wrote:
>
>> Hi all,
>>
>> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows
>> absolute wrong traffic numbers. As example we have machines constantly
>> doing 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 1
>> Mbit/s thats all.
>>
>> We use normal nprobe where our arista switches send data too as it was
>> before with 2.5
>>
>> nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2
>> --dump-stats
>>
>>
>> We had issues with 2 before with wrong traffic and arista switches which
>> was solved after reporting that to the list.
>>
>> --
>>
>> Enrico Kern
>>
>> Lead System Engineer
>>
>> glispa GmbH
>> Sonnenburger Straße 73
>> 10437 Berlin, Germany
>>
>> tel: +49 30 5557130-17 <+49%2030%20555713017>
>>
>> mobile: +49 152 26814501
>>
>> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>>
>> __
>> Sitz Berlin, AG Charlottenburg HRB 114678B
>>
>>
>> ___
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
>
> ___
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>



-- 

Enrico Kern

Lead System Engineer

glispa GmbH
Sonnenburger Straße 73
10437 Berlin, Germany

tel: +49 30 5557130-17

mobile: +49 152 26814501

skype: flyersaenrico.k...@glispamedia.comwww.glispa.com

__
Sitz Berlin, AG Charlottenburg HRB 114678B
___
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

Re: [Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2017-06-08 Thread Simone Mainardi 
Enrico,

If I remember correctly, your Arista switches are sending sFlow. So please
try to add nProbe option* --upscale-traffic* that will adjust the traffic
on the basis of sFlow sampling rates.

Simone

On Thu, Jun 8, 2017 at 10:52 AM, Enrico Kern 
wrote:

> Hi all,
>
> yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows
> absolute wrong traffic numbers. As example we have machines constantly
> doing 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 1
> Mbit/s thats all.
>
> We use normal nprobe where our arista switches send data too as it was
> before with 2.5
>
> nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2
> --dump-stats
>
>
> We had issues with 2 before with wrong traffic and arista switches which
> was solved after reporting that to the list.
>
> --
>
> Enrico Kern
>
> Lead System Engineer
>
> glispa GmbH
> Sonnenburger Straße 73
> 10437 Berlin, Germany
>
> tel: +49 30 5557130-17 <+49%2030%20555713017>
>
> mobile: +49 152 26814501
>
> skype: flyersaenrico.k...@glispamedia.comwww.glispa.com
>
> __
> Sitz Berlin, AG Charlottenburg HRB 114678B
>
>
> ___
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
___
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

[Ntop] Wrong Traffic Numbers after upgrade from 2.5 to 3.1

2017-06-08 Thread Enrico Kern 
Hi all,

yesterday i upgraded our ntop and nprobe from 2.5 to 3.1. Now it shows
absolute wrong traffic numbers. As example we have machines constantly
doing 4 to 10 gbit/s and all it shows now for all hosts is 2 kbit/s up to 1
Mbit/s thats all.

We use normal nprobe where our arista switches send data too as it was
before with 2.5

nprobe --zmq tcp://*:5557 -i none --collector-port 6343 --verbose 2
--dump-stats


We had issues with 2 before with wrong traffic and arista switches which
was solved after reporting that to the list.

-- 

Enrico Kern

Lead System Engineer

glispa GmbH
Sonnenburger Straße 73
10437 Berlin, Germany

tel: +49 30 5557130-17

mobile: +49 152 26814501

skype: flyersaenrico.k...@glispamedia.comwww.glispa.com

__
Sitz Berlin, AG Charlottenburg HRB 114678B
___
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop