Re: Nprobe + ntopng packet detailed statistics
Mikhael Chernogorsky <[email protected]>
| Newsgroups | gmane.linux.ntop.general |
|---|---|
| Message-ID | <CAB2Za2B5-sE-LPY1UxqCH=G3iERX_e1Xw=T5ot-GiJym70f0-w@mail.gmail.com> |
It works with -V 9 key nprobe -i ens192 -n none -T "%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %L7_PROTO @SIP@ @RTP@" --tunnel --redis localhost --zmq tcp://127.0.0.1:1234 --zmq-probe-mode --zmq-encrypt-pwd myencryptionkey --online-license-check -V 9 (--tunnel for erspan) Best, Mike On Thu, Feb 9, 2017 at 2:43 PM, Jean-Pierre Human <[email protected]> wrote: > Sorry wrong thread... > > On Thu, Feb 9, 2017 at 2:42 PM, Jean-Pierre Human <[email protected]> > wrote: > >> Hi Luca >> >> Upgraded to nightly however no changes, see the attached image. >> >> https://imagebin.ca/v/3BnZuBaPazqu >> >> Thanks >> Jean-Pierre Human >> >> On Thu, Feb 9, 2017 at 1:10 PM, Mikhael Chernogorsky < >> [email protected]> wrote: >> >>> Hi again, >>> >>> checked with a night build. >>> Have the same result (no TOS/COS info) for TOS. >>> >>> Have 12:52:05 [nprobe.c:7312] IP TOS is accounted on probe side >>> >>> Should this informations be displayed on a flow page ? >>> >>> Im checking it with ssh (tos 0x10) and ping -Q packets/flows >>> >>> Thanks, >>> Mike >>> >>> >>> >>> On Thu, Feb 9, 2017 at 11:23 AM, Mikhael Chernogorsky < >>> [email protected]> wrote: >>> >>>> Hi Luca, >>>> nope, using stable one. will check with devs >>>> >>>> Thanks, >>>> Mike >>>> >>>> On Thu, Feb 9, 2017 at 10:51 AM, Luca Deri <[email protected]> wrote: >>>> >>>>> Mikhael, >>>>> are you using the latest development versions of ntopng and nProbe? If >>>>> not, please do >>>>> >>>>> Luca >>>>> >>>>> >>>>> >>>>> On 02/09/2017 08:53 AM, Mikhael Chernogorsky wrote: >>>>> >>>>> Hi, >>>>> I've just got nprobe (pro), voip plugin, ntopng (ce). >>>>> was planned to use it to monitor voip problems. >>>>> But could not configure them (nprobe + ntopng) to work right. Ntopng >>>>> does not show any VOIP/TOS related statistics >>>>> >>>>> Tried to run it as described there >>>>> http://www.ntop.org/nprobe/monitoring-voip-traffic-with-npro >>>>> be-and-ntopng/ >>>>> >>>>> >>>>> 1. # nprobe -i eth1 -T "%IPV4_SRC_ADDR %IPV4_DST_ADDR >>>>> %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FIRST_SWITCHED >>>>> %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %L7_PROTO >>>>> @SIP@ @RTP@" --redis localhost --zmq tcp://127.0.0.1:1234 >>>>> 2. >>>>> 3. $ ntopng -i tcp://127.0.0.1:1234 >>>>> >>>>> >>>>> and this version >>>>> nprobe -i ens192 -T "%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP >>>>> %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED >>>>> %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %L7_PROTO @SIP@ @RTP@" >>>>> --redis localhost --zmq-probe-mode --zmq-encrypt-pwd myencryptionkey >>>>> --online-license-check >>>>> >>>>> >>>>> Still see no voip packet or COS/TOS details. >>>>> >>>>> >>>>> What am I doing wrong ? >>>>> >>>>> Best, >>>>> Mike >>>>> >>>>> >>>>> _______________________________________________ >>>>> Ntop mailing [email protected]://listgateway.unipi.it/mailman/listinfo/ntop >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> Ntop mailing list >>>>> [email protected] >>>>> http://listgateway.unipi.it/mailman/listinfo/ntop >>>>> >>>> >>>> >>> >>> _______________________________________________ >>> Ntop mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop >>> >> >> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop