Re: IPv6 flow

Stop - for me it works. I've just watched the wrong interface witch no 
IPv6 traffic - sorry for the noise.

There is only the Debian dependency problem left.



Am 10.02.2018 um 14:14 schrieb Matthias Henze:
> Hi Simone,
> 
> I just don't remember how to do this.
> 
> BTW: For me this used to work and stopped with one update. I don't know 
> which as I do not use Ntop to frequently.
> 
> What about the Debian dependency problem?
> 
> TIA
> Matthias
> 
> Am 10.02.2018 um 13:42 schrieb Simone Mainardi:
>> Can you guys generate and send privately/upload a NetFlow pcap that 
>> contains both template and data records for IPv4 and IPv6? I want to 
>> try and reproduce.
>>
>> Thanks,
>>
>> Simone
>>
>>> On 10 Feb 2018, at 12:52, Matthias Henze <[email protected] 
>>> <mailto:[email protected]>> wrote:
>>>
>>> Hi,
>>>
>>> thanks for pointing this out and count me in, as mine stopped working 
>>> too. My configs:
>>>
>>> NPROBE 1 - version: 8.3.180129-6049
>>>
>>> --zmq="tcp://127.0.0.1:5556"
>>> --collector-port=4711
>>> -n=none
>>> -i=none
>>> --pid-file=/var/run/nprobe-rh.pid
>>> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP 
>>> %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS 
>>> %FLOW_END_MILLISECONDS %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL 
>>> %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR 
>>> %IPV6_SRC_MASK %IPV6_DST_MASK %IP_PROTOCOL_VERSION %FIRST_SWITCHED 
>>> %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS"
>>> --online-license-check
>>>
>>> NPROBE 2 - version: 8.3.180129-6049
>>>
>>> --zmq="tcp://127.0.0.1:5557"
>>> --collector-port=4712
>>> -n=none
>>> -i=none
>>> --pid-file=/var/run/nprobe-tk.pid
>>> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP 
>>> %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS 
>>> %FLOW_END_MILLISECONDS %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL 
>>> %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR 
>>> %IPV6_SRC_MASK %IPV6_DST_MASK %IP_PROTOCOL_VERSION %FIRST_SWITCHED 
>>> %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS"
>>> --online-license-check
>>>
>>> NTOPNG - version: 3.3.180129-4062
>>>
>>> -G=/var/run/ntopng.pid
>>> --interface="tcp://127.0.0.1:5556"
>>> --interface="tcp://127.0.0.1:5557"
>>> -F="mysql;localhost;ntop;flows;ntop;ntop"
>>> -m="XX.XXX.XXX.XXX,YY.YYY.YYY.YYY/29,ZZZ.ZZZ.ZZZ.Z/24,AAAA:BBBB:CCCC:1::2/64,EEEE:FFFF:AAAA:2::252/64,BBBB:CCCC:DDDD:3::1/64" 
>>>
>>> -D=all
>>> -p="/etc/ntopng/protos.txt"
>>> --online-license-check
>>>
>>>
>>> Next Issue: In the Debian packages there is a dependency issue. The 
>>> current versions could not be installed.
>>>
>>> pfring-dkms : depends on: pfring (= 7.1.0-1734) but 7.1.0-1736 is 
>>> installed
>>>
>>> Matthias
>>>
>>>
>>>
>>> Am 10.02.2018 um 12:31 schrieb Joni Lee:
>>>> Hello,
>>>> This is my settings but didn't get IPv6(IPv4 works fine) flow
>>>> nprobe.conf
>>>> --zmq="tcp://*:5551"
>>>> -i=none
>>>> -n=none
>>>> --collector-port=2055
>>>> -V=9
>>>> -T="%EXPORTER_IPV4_ADDRESS %EXPORTER_IPV6_ADDRESS 
>>>> %IP_PROTOCOL_VERSION %IPV4_SRC_ADDR %IPV6_SRC_ADDR %IPV4_DST_ADDR 
>>>> %IPV6_DST_ADDR %IPV4_NEXT_HOP %IPV6_NEXT_HOP %INPUT_SNMP 
>>>> %OUTPUT_SNMP %IN_PKTS %IN_BYTES
>>>>  %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS 
>>>> %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_MASK 
>>>> %IPV4_DST_MASK %IPV6_DST_MASK"
>>>> ntopng.conf
>>>> -i="tcp://127.0.0.1:5551"
>>>> -i="tcp://127.0.0.1:5552"
>>>> -G=/var/run/ntopng.pid
>>>> -m=192.168.0.0/24
>>>> -m=172.16.0.0/16
>>>> Anything missed here ?
>>>> Thanks in Advanced.
>>>
>>>
>>>
>>> -- 
>>>
>>> MHC SoftWare GmbH
>>> Fichtera 17
>>> 96274 Itzgrund/Germany
>>> voice: +49-(0)9533-92006-0
>>> fax: +49-(0)9533-92006-6
>>> e-mail:[email protected] <mailto:[email protected]>
>>>
>>> HR Coburg: B2242
>>> Geschaeftsfuehrer: Matthias Henze
>>>
>>>
>>>
>>> _______________________________________________
>>> Ntop mailing list
>>> [email protected] <mailto:[email protected]>
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
> 
> 
> 



-- 

MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany   

voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: [email protected]

HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze



_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop