Re: IPv6

Hi Luca,

I see this:

root@ntop:/etc/nprobe# nprobe --collector-port=4711 
--dump-pkts=/tmp/netflow.pcap
07/Apr/2017 09:09:56 [nprobe.c:3407] Valid nProbe license found
07/Apr/2017 09:09:56 [nprobe.c:4586] Dumping incoming packets on 
/tmp/netflow.pcap
07/Apr/2017 09:09:56 [nprobe.c:4872] WARNING: The output interfaceId is 
set to 0: did you forget to use -Q perhaps ?
07/Apr/2017 09:09:56 [nprobe.c:4875] WARNING: The input interfaceId is 
set to 0: did you forget to use -u perhaps ?
07/Apr/2017 09:09:56 [nprobe.c:4916] -i is ignored as 
--collector-port|-3 has been used: using '-i none'
07/Apr/2017 09:09:56 [nprobe.c:4975] Welcome to nProbe v.7.4.170215 
($Revision: 5334 $) for x86_64-unknown-linux-gnu with native PF_RING 
acceleration
07/Apr/2017 09:09:56 [nprobe.c:4985] Running on Debian GNU/Linux 8.2 
(jessie)
07/Apr/2017 09:09:56 [nprobe.c:4996] [LICENSE] nProbe SystemId: 
9C3A8E0D00001090
07/Apr/2017 09:09:56 [nprobe.c:5085] WARNING: -n parameter is missing. 
127.0.0.1:2055 will be used.
07/Apr/2017 09:09:56 [nprobe.c:7308] Welcome to nProbe v.7.4.170215 for 
x86_64-unknown-linux-gnu
07/Apr/2017 09:09:56 [plugin.c:1045] 0 plugin(s) enabled
07/Apr/2017 09:09:56 [nprobe.c:6836] Non IPv4/v6 traffic is discarded 
according to the template
07/Apr/2017 09:09:56 [util.c:434] GeoIP: loaded AS config file 
/usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat
07/Apr/2017 09:09:56 [util.c:445] GeoIP: loaded AS IPv6 config file 
/usr/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat
07/Apr/2017 09:09:56 [nprobe.c:5495] Using packet capture length 128
07/Apr/2017 09:09:56 [nprobe.c:7484] IPv6 traffic will NOT be 
exported/accounted by this probe
07/Apr/2017 09:09:56 [nprobe.c:7485] due to configuration options (e.g. 
use NetFlow v9)
07/Apr/2017 09:09:56 [nprobe.c:7631] Not capturing packet from interface 
(collector mode)
07/Apr/2017 09:09:56 [collect.c:147] Flow collector listening on port 
4711 (IPv4/v6)
07/Apr/2017 09:09:56 [nprobe.c:7856] nProbe started successfully
07/Apr/2017 09:10:18 [export.c:503] WARNING: Unable to export non-IPv4 
flows using NetFlow v5. Dropped.



Most notable:


07/Apr/2017 09:09:56 [nprobe.c:7484] IPv6 traffic will NOT be 
exported/accounted by this probe


Any suggestions?

TIA
Matthias


Am 06.04.2017 um 15:56 schrieb Luca Deri:
> Hi Matthias
> just generate a pcap with wireshark where you filter just flows. Until a template is received, wireshark is unable to decode the traffic, so you can stop *after* wireshark is able to decode the flows as it means that the template has been received
>
> Luca
>
>> On 6 Apr 2017, at 15:53, Matthias Henze <[email protected]> wrote:
>>
>> Hi Luca,
>>
>> generation a pcap is no problem, but what is a "template" in this context?
>>
>> TIA
>> Matthias
>>
>> Am 05.04.2017 um 21:24 schrieb Luca Deri:
>>> Hi Matthias
>>> perhaps the template the Mikrotik is using is not handled properly. Can you please send me (not to the list) a pcap containing template+some IPv6 flows?
>>>
>>> Thanks Luca
>>>
>>>> On 5 Apr 2017, at 17:25, Matthias Henze <[email protected]> wrote:
>>>>
>>>> Hi,
>>>>
>>>> I use NetFolow to send traffic data from my Microtik routers to Nprobe and Ntop. This works as expected for IPv4 but no IPv6 traffic is recorded. What may cause this?
>>>>
>>>> TIA
>>>> Matthias
>>>>
>>>>
>>>> --
>>>>
>>>> MHC SoftWare GmbH
>>>> Fichtera 17
>>>> 96274 Itzgrund/Germany
>>>> voice: +49-(0)9533-92006-0
>>>> fax: +49-(0)9533-92006-6
>>>> e-mail: [email protected]
>>>>
>>>> HR Coburg: B2242
>>>> Geschaeftsfuehrer: Matthias Henze
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Ntop mailing list
>>>> [email protected]
>>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>>> _______________________________________________
>>> Ntop mailing list
>>> [email protected]
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>>
>>
>> --
>>
>> MHC SoftWare GmbH
>> Fichtera 17
>> 96274 Itzgrund/Germany
>> voice: +49-(0)9533-92006-0
>> fax: +49-(0)9533-92006-6
>> e-mail: [email protected]
>>
>> HR Coburg: B2242
>> Geschaeftsfuehrer: Matthias Henze
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>


-- 

MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany   

voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: [email protected]

HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze