Re: Historical Data Issue's

Hi Simon,

On Mon, Apr 3, 2017 at 11:38 AM, Simon Bell <[email protected]> wrote:

> Hi Simone,
>
>
>
> Ntopng config:
>
>
>
> ntopng --user "root" --pid "/var/run/ntopng.pid" --http-port "80"
> --interface "tcp://127.0.0.1:5000,tcp://127.0.0.1:5001,tcp://127.0.0.1:
> 5002,tcp://127.0.0.1:5003"
>

the above part of the configuration is not OK. If you want to combine
multiple interfaces into one, prepend a "view:" string, i.e.,

view:tcp://127.0.0.1:5000,tcp://127.0.0.1:5001,tcp://127.0.0.1:5002,tcp://
127.0.0.1:5003


> --interface "tcp://127.0.0.1:5000" --interface "tcp://127.0.0.1:5001"
> --interface "tcp://127.0.0.1:5002" --interface "tcp://127.0.0.1:5003"
> --interface "tcp://127.0.0.1:5004" --interface "tcp://127.0.0.1:5005"
> --max-num-flows "800000" --max-num-hosts "750000" --dump-flows
> "mysql;localhost;ntopng;flows;xxx:xxx"
>
>
>
> I made it root In case it was a permisions thing, I’ll revert once working.
>
>
>
> nProbe configs:
>
>
>
> nprobe -G -i none -n none -3 9990 --zmq tcp://*:5004 -u 1 -Q 2 -V 9
> --collector-sampling-rate 1000
>
> nprobe -G -i none -n none -3 9991 --zmq tcp://*:5005 -u 1 -Q 2 -V 9
> --collector-sampling-rate 1000
>
> nprobe -G -i none -n none -3 9996 --zmq tcp://*:5000 -V 10 -u 1 -Q 2
> --collector-sample-rate 10
>
> nprobe -G -i none -n none -3 9997 --zmq tcp://*:5001 -V 10 -u 1 -Q 2
> --collector-sample-rate 2000 --sample-rate @40:1
>
> nprobe -G -i none -n none -3 9998 --zmq tcp://*:5002 -V 10 -u 1 -Q 2
> --sample-rate @40:1 --collector-sample-rate 2000
>
>
>

you don't need -V here as the version is determined from the netflow
packets.


> On 2.4 we had the 47 years issue, but could see flows. On Dev we can’t see
> flows on the flows screen. Historic data didn’t work on either.
>
>
>
> I’m combining multiple nprobe interfaces into 1 interface on ntopng, but
> as the sql query includes an interface ID I wouldn’t expect this to cause
> any issues?
>

can you check if flows are properly stored for non-view interfaces?




>
>
> Cheers
>
>
>
> Simon
>
>
>
>
>   Simon Bell
> ------------------------------
> Core Network Architect
>
> ddi. *0845 123 2229*
> t. *0845 123 2222*
> e. *[email protected] <[email protected]>* *Wakefield Office*
> Node4 Ltd, Pope Street,
> Normanton, Wakefield, WF6 2TA
>
>
> [image: Visit www.node4.co.uk] <http://www.node4.co.uk>
>
> [image: Visit www.node4.co.uk] <http://www.node4.co.uk>
> [image: Visit Node4 on Twitter] <http://www.twitter.co.uk/Node4Ltd>
> [image: Visit Node4 on Linkedin]
> <https://www.linkedin.com/company/node4-ltd>
> [image: Visit Node4 on Facebook] <http://www.facebook.com/Node4>
>
>
>
>
> <http://www.node4.co.uk/blog/how-a-visit-to-cisco-inspired-the-node4-mobile-solution-centre/>
>
>
> Node4 Limited is registered in England No: 04759927 and has its registered
> office at Millennium Way, Pride Park, Derby, DE24 8HZ
> The information contained in this email is confidential and is intended
> for the exclusive use of the email addressee shown.
> If you are not the addressee, any disclosure, reproduction, distribution
> or other dissemination or use of this communication is strictly prohibited.
> If you have received this mail in error, please notify our mail manager at
> [email protected] and delete it from your system.
> Opinions expressed in this email are those of the individual not the
> company, unless specifically indicated to that effect.
> ------------------------------
> This email has been scanned by Node4's Email Security System.
> ------------------------------
> This email message has been delivered safely and archived online by
> Mimecast.
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop