Re: IPv6 flow

Can you guys generate and send privately/upload a NetFlow pcap that contains both template and data records for IPv4 and IPv6? I want to try and reproduce.

Thanks,

Simone

> On 10 Feb 2018, at 12:52, Matthias Henze <[email protected]> wrote:
> 
> Hi,
> 
> thanks for pointing this out and count me in, as mine stopped working too. My configs:
> 
> NPROBE 1 - version: 8.3.180129-6049
> 
> --zmq="tcp://127.0.0.1:5556 <tcp://127.0.0.1:5556>"
> --collector-port=4711
> -n=none
> -i=none
> --pid-file=/var/run/nprobe-rh.pid
> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK %IP_PROTOCOL_VERSION %FIRST_SWITCHED %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS"
> --online-license-check
> 
> NPROBE 2 - version: 8.3.180129-6049
> 
> --zmq="tcp://127.0.0.1:5557 <tcp://127.0.0.1:5557>"
> --collector-port=4712
> -n=none
> -i=none
> --pid-file=/var/run/nprobe-tk.pid
> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK %IP_PROTOCOL_VERSION %FIRST_SWITCHED %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS"
> --online-license-check
> 
> NTOPNG - version: 3.3.180129-4062
> 
> -G=/var/run/ntopng.pid
> --interface="tcp://127.0.0.1:5556 <tcp://127.0.0.1:5556>"
> --interface="tcp://127.0.0.1:5557 <tcp://127.0.0.1:5557>"
> -F="mysql;localhost;ntop;flows;ntop;ntop"
> -m="XX.XXX.XXX.XXX,YY.YYY.YYY.YYY/29,ZZZ.ZZZ.ZZZ.Z/24,AAAA:BBBB:CCCC:1::2/64,EEEE:FFFF:AAAA:2::252/64,BBBB:CCCC:DDDD:3::1/64"
> -D=all
> -p="/etc/ntopng/protos.txt"
> --online-license-check
> 
> 
> Next Issue: In the Debian packages there is a dependency issue. The current versions could not be installed.
> 
> pfring-dkms : depends on: pfring (= 7.1.0-1734) but 7.1.0-1736 is installed
> 
> Matthias
> 
> 
> 
> Am 10.02.2018 um 12:31 schrieb Joni Lee:
>> Hello,
>> This is my settings but didn't get IPv6(IPv4 works fine) flow
>> nprobe.conf
>> --zmq="tcp://*:5551"
>> -i=none
>> -n=none
>> --collector-port=2055
>> -V=9
>> -T="%EXPORTER_IPV4_ADDRESS %EXPORTER_IPV6_ADDRESS %IP_PROTOCOL_VERSION %IPV4_SRC_ADDR %IPV6_SRC_ADDR %IPV4_DST_ADDR %IPV6_DST_ADDR %IPV4_NEXT_HOP %IPV6_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES
>>  %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_MASK %IPV4_DST_MASK %IPV6_DST_MASK"
>> ntopng.conf
>> -i="tcp://127.0.0.1:5551"
>> -i="tcp://127.0.0.1:5552"
>> -G=/var/run/ntopng.pid
>> -m=192.168.0.0/24
>> -m=172.16.0.0/16
>> Anything missed here ?
>> Thanks in Advanced.
> 
> 
> 
> -- 
> 
> MHC SoftWare GmbH
> Fichtera 17
> 96274 Itzgrund/Germany   
> voice: +49-(0)9533-92006-0
> fax: +49-(0)9533-92006-6
> e-mail: [email protected] <mailto:[email protected]>
> 
> HR Coburg: B2242
> Geschaeftsfuehrer: Matthias Henze
> 
> 
> 
> _______________________________________________
> Ntop mailing list
> [email protected] <mailto:[email protected]>
> http://listgateway.unipi.it/mailman/listinfo/ntop <http://listgateway.unipi.it/mailman/listinfo/ntop>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop