Info VLAN Disaggregation NTOPNG
Flavio Baccaglini <[email protected]> Thu, 28 Jun 2018 12:22:49 +0200
| Newsgroups | gmane.linux.ntop.general |
|---|---|
| Message-ID | <[email protected]> |
Good Morning I have a ntopng/nprobe system that i use to collect the sflow data from a switch. The version of ntopng is 3.4 stable. The system version is Debian 9. My configuration of ntopng and nprobe are save in the file that i enclose you. I want to make a dissagregation at VLAN level, but when i set the value in preferences in ntopng the system stop to collect the flow and don't do nothing. I try a disaggregation level for interface and it works. Could someone help me, or tell me if i have a configuration mistake o if there is an another problem? Thank you for the help, and sorry for the bad english Baccaglini Flavio _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
nprobe.conf
(text/plain, 2.1 KB)
# The configuration file is similar to the command line, with the exception that an equal # sign '=' must be used between key and value. Example: -i=p1p2 or --interface=p1p2 For # options with no value (e.g. -v) the equal is also necessary. Example: "-v=" must be used. # # # -g|--pid-file # Specifies the path where the PID (process ID) is saved. This option is ignored when # nProbe is controlled with systemd (e.g., service nProbe start). # -g=/var/run/nprobe.pid # # -G|--daemon-mode # This parameter causes nProbe to become a daemon, i.e. a task which runs in background # without connection to a specific terminal. To use nProbe other than as a casual monitoring # tool, you probably will want to use this option. This option is ignored when nProbe is # controlled with systemd (e.g., service nProbe start) # # -G= # # -i|--interface # Specifies the physical network interface that nProbe will use to perform the # monitoring. On Unix you can specify the interface name (e.g. -i lo) whereas on Windows # you must use the interface number instead (see -h to see the list of numeric ids). # To disable monitoring from physical interfaces (e.g., when nProbe is used in # collector-only mode) specify -i=none # # -i=none # -i=eth1 -i=none --zmq tcp://95.140.135.155:5556 --zmq-probe-mode --zmq-disable-compression # # -n|--collector # Specifies the NetFlow collector that will be used by nProbe to send the monitored # flows. This option can be specified multiple times to deliver monitored flows to # multiple collectors in round-robin mode. To disable flow export to NetFlow collectors # specify -n=none # # -n=10.0.0.1:2055 -n=none # # -3|--collector-port # Specifies the port that is being used by a NetFlow exporter to send NetFlow to nProbe. # Multiple NetFlow exporters can symultaneously send data to nProbe using the same port. # In case no NetFlow exporter is sending data it is safe to skip this option. # # -3=6363 --collector-port 6343 -p 1/1/1/1/1/1/1 --check-license
ntopng.conf
(text/plain, 3.1 KB)
# The configuration file is similar to the command line, with the exception that an equal # sign '=' must be used between key and value. Example: -i=p1p2 or --interface=p1p2 For # options with no value (e.g. -v) the equal is also necessary. Example: "-v=" must be used. # # # -G|--pid-path # Specifies the path where the PID (process ID) is saved. This option is ignored when # ntopng is controlled with systemd (e.g., service ntopng start). # -G=/var/run/ntopng.pid # # -e|--daemon # This parameter causes ntop to become a daemon, i.e. a task which runs in the background # without connection to a specific terminal. To use ntop other than as a casual monitoring # tool, you probably will want to use this option. This option is ignored when ntopng is # controlled with systemd (e.g., service ntopng start) # # -e= # # -i|--interface # Specifies the network interface or collector endpoint to be used by ntopng for network # monitoring. On Unix you can specify both the interface name (e.g. lo) or the numeric # interface id as shown by ntopng -h. On Windows you must use the interface number instead. # Note that you can specify -i multiple times in order to instruct ntopng to create multi- # ple interfaces. # # -i=eth1 # -i=eth2 -i=ens192 -i=tcp://*:5556c --zmq-collector-mode # # -w|--http-port # Sets the HTTP port of the embedded web server. # # -w=3000 # # -m|--local-networks # ntopng determines the ip addresses and netmasks for each active interface. Any traffic on # those networks is considered local. This parameter allows the user to define additional # networks and subnetworks whose traffic is also considered local in ntopng reports. All # other hosts are considered remote. If not specified the default is set to 192.168.1.0/24. # # Commas separate multiple network values. Both netmask and CIDR notation may be used, # even mixed together, for instance "131.114.21.0/24,10.0.0.0/255.0.0.0". # # -m=10.10.123.0/24 # -m=10.10.124.0/24 -m=10.0.0.0/24 # # -n|--dns-mode # Sets the DNS address resolution mode: 0 - Decode DNS responses and resolve only local # (-m) numeric IPs 1 - Decode DNS responses and resolve all numeric IPs 2 - Decode DNS # responses and don't resolve numeric IPs 3 - Don't decode DNS responses and don't resolve # #-n=1 --dns-mode 1 # # -S|--sticky-hosts # ntopng periodically purges idle hosts. With this option you can modify this behaviour by # telling ntopng not to purge the hosts specified by -S. This parameter requires an argu- # ment that can be "all" (Keep all hosts in memory), "local" (Keep only local hosts), # "remote" (Keep only remote hosts), "none" (Flush hosts when idle). # # -S= # # -d|--data-dir # Specifies the data directory (it must be writable by the user that is executing ntopng). # # -d=/var/tmp/ntopng # # -q|--disable-autologout # Disable web interface logout for inactivity. # # -q= #--check-license