Re: nprobe to ntop missing flows

Hi David,

Please try to add also --zmq-disable-buffering to the nprobe options.

Emanuele

On 9/4/18 5:31 PM, David Larson wrote:
> Hello!
> I am trying to collect netflow from a cisco 3850 and view it in 
> ntopng. I am able to see some data, but it appears intermittent. When 
> I view nprobe with -b 2 option it seems like the flows pause every few 
> seconds then resume. The real time traffic in ntopng shows traffic, 
> then nothing, traffic, then nothing. Am I missing a collection rate 
> config or something?
>
> ntopng enterprise and nprobe pro on same machine
>
> ntopng conf
> -w=3000
> -W=0
> -g=-1
> -m="<mylocalnetwork>"
> -d=/storage/ntopng
> -G=/var/run/ntopng.pid
> -i=tcp://127.0.0.1:5666 <http://127.0.0.1:5666>
> --online-license-check
>
>
> nprobe -n none --zmq "tcp://*:5666" --collector-port 2166 -T @NTOPNG@ 
> --disable-cache
>
>
>
> 04/Sep/2018 11:15:39 [nprobe.c:3297] L7 Proto            Diff      Total
> 04/Sep/2018 11:15:39 [nprobe.c:3311]    Unknown/0          303.55 MB  
> 741.98 MB
> 04/Sep/2018 11:15:39 [nprobe.c:3319] Current flow export rate: [131.8 
> flows/sec]
> 04/Sep/2018 11:15:39 [nprobe.c:3322] Flow drops: [export queue too 
> long=0][too many flows=0][ELK queue flow drops=0]
> 04/Sep/2018 11:15:39 [nprobe.c:3327] Export Queue: 0/512000 [0.0 %]
> 04/Sep/2018 11:15:39 [nprobe.c:3332] Flow Buckets: 
> [active=0][allocated=0][toBeExported=0]
> 04/Sep/2018 11:15:39 [nprobe.c:3369] Collector Threads: [871 pkts@0]
> 04/Sep/2018 11:15:39 [nprobe.c:3108] Processed packets: 0 (max bucket 
> search: 5)
> 04/Sep/2018 11:15:39 [nprobe.c:3091] Fragment queue length: 0
> 04/Sep/2018 11:15:39 [nprobe.c:3118] Flow collection stats:  
> [collected pkts: 871][processed flows: 19898]
> 04/Sep/2018 11:15:39 [nprobe.c:3121] Flow export stats:      [0 
> bytes/0 pkts][0 flows/0 pkts sent]
> 04/Sep/2018 11:15:39 [nprobe.c:3127] Flow export drop stats: [0 
> bytes/0 pkts][0 flows]
> 04/Sep/2018 11:15:39 [nprobe.c:3132] Total flow stats:       [0 
> bytes/0 pkts][0 flows/0 pkts sent]
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop