Re: IPv6 flow
Matthias Henze <[email protected]>
| Newsgroups | gmane.linux.ntop.general |
|---|---|
| Organization | MHC SoftWare GmbH |
| Message-ID | <[email protected]> |
Hi Simone, I just don't remember how to do this. BTW: For me this used to work and stopped with one update. I don't know which as I do not use Ntop to frequently. What about the Debian dependency problem? TIA Matthias Am 10.02.2018 um 13:42 schrieb Simone Mainardi: > Can you guys generate and send privately/upload a NetFlow pcap that > contains both template and data records for IPv4 and IPv6? I want to try > and reproduce. > > Thanks, > > Simone > >> On 10 Feb 2018, at 12:52, Matthias Henze <[email protected] >> <mailto:[email protected]>> wrote: >> >> Hi, >> >> thanks for pointing this out and count me in, as mine stopped working >> too. My configs: >> >> NPROBE 1 - version: 8.3.180129-6049 >> >> --zmq="tcp://127.0.0.1:5556" >> --collector-port=4711 >> -n=none >> -i=none >> --pid-file=/var/run/nprobe-rh.pid >> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP >> %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS >> %FLOW_END_MILLISECONDS %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL >> %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR >> %IPV6_SRC_MASK %IPV6_DST_MASK %IP_PROTOCOL_VERSION %FIRST_SWITCHED >> %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS" >> --online-license-check >> >> NPROBE 2 - version: 8.3.180129-6049 >> >> --zmq="tcp://127.0.0.1:5557" >> --collector-port=4712 >> -n=none >> -i=none >> --pid-file=/var/run/nprobe-tk.pid >> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP >> %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS >> %FLOW_END_MILLISECONDS %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL >> %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR >> %IPV6_SRC_MASK %IPV6_DST_MASK %IP_PROTOCOL_VERSION %FIRST_SWITCHED >> %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS" >> --online-license-check >> >> NTOPNG - version: 3.3.180129-4062 >> >> -G=/var/run/ntopng.pid >> --interface="tcp://127.0.0.1:5556" >> --interface="tcp://127.0.0.1:5557" >> -F="mysql;localhost;ntop;flows;ntop;ntop" >> -m="XX.XXX.XXX.XXX,YY.YYY.YYY.YYY/29,ZZZ.ZZZ.ZZZ.Z/24,AAAA:BBBB:CCCC:1::2/64,EEEE:FFFF:AAAA:2::252/64,BBBB:CCCC:DDDD:3::1/64" >> -D=all >> -p="/etc/ntopng/protos.txt" >> --online-license-check >> >> >> Next Issue: In the Debian packages there is a dependency issue. The >> current versions could not be installed. >> >> pfring-dkms : depends on: pfring (= 7.1.0-1734) but 7.1.0-1736 is >> installed >> >> Matthias >> >> >> >> Am 10.02.2018 um 12:31 schrieb Joni Lee: >>> Hello, >>> This is my settings but didn't get IPv6(IPv4 works fine) flow >>> nprobe.conf >>> --zmq="tcp://*:5551" >>> -i=none >>> -n=none >>> --collector-port=2055 >>> -V=9 >>> -T="%EXPORTER_IPV4_ADDRESS %EXPORTER_IPV6_ADDRESS >>> %IP_PROTOCOL_VERSION %IPV4_SRC_ADDR %IPV6_SRC_ADDR %IPV4_DST_ADDR >>> %IPV6_DST_ADDR %IPV4_NEXT_HOP %IPV6_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP >>> %IN_PKTS %IN_BYTES >>> %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS >>> %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_MASK >>> %IPV4_DST_MASK %IPV6_DST_MASK" >>> ntopng.conf >>> -i="tcp://127.0.0.1:5551" >>> -i="tcp://127.0.0.1:5552" >>> -G=/var/run/ntopng.pid >>> -m=192.168.0.0/24 >>> -m=172.16.0.0/16 >>> Anything missed here ? >>> Thanks in Advanced. >> >> >> >> -- >> >> MHC SoftWare GmbH >> Fichtera 17 >> 96274 Itzgrund/Germany >> voice: +49-(0)9533-92006-0 >> fax: +49-(0)9533-92006-6 >> e-mail:[email protected] <mailto:[email protected]> >> >> HR Coburg: B2242 >> Geschaeftsfuehrer: Matthias Henze >> >> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] <mailto:[email protected]> >> http://listgateway.unipi.it/mailman/listinfo/ntop > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > -- MHC SoftWare GmbH Fichtera 17 96274 Itzgrund/Germany voice: +49-(0)9533-92006-0 fax: +49-(0)9533-92006-6 e-mail: [email protected] HR Coburg: B2242 Geschaeftsfuehrer: Matthias Henze _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop