Re: ntop-ng newbe question
Emanuele Faranda <[email protected]> Fri, 18 Oct 2019 09:49:18 +0200
| Newsgroups | gmane.linux.ntop.general |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --===============0611082204138521139== Content-Type: multipart/alternative; boundary="------------D9AB2DD2363E74D33CE9B417" Content-Language: en-US-large This is a multi-part message in MIME format. --------------D9AB2DD2363E74D33CE9B417 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Hi Leandro, Please see below. On 10/17/19 4:39 PM, Leandro Roggerone wrote: > Hi guys, im here trying to find a replacement for my nfsen / nfdump > platform. > Im trying free version of ntop-ng , so here are some questions: > > 1) How to properly create a netflow analisis platform with ntop-ng? > I already installed ntop-ng + nprobe packages. > It seems to work ok but , but flows are limite to 25k. > Is there some free version for this ? nprobe does not have a free version. If you need a demo license for testing please contact us https://www.ntop.org/support/need-help-2/contact-us . > > 2) Is it possible to create custom traffic profiles from netflow data ? > For instance , I use to create some filters like: > src net x.x.x.x/24 and out if 13. > It seems to be a similar feature but it is only available at pro version. BPF like filters are only available in the ntopng pro version > > 3) How can I analize my traffic? > Is it possible to filter (as above) and sort by flow duration , > traffic rate, etc. > If so , please provide some howto, I can not get it. Please check out the following links https://www.ntop.org/guides/ntopng/advanced_features/flows_dump.html https://www.ntop.org/guides/ntopng/historical_flows.html Regards, Emanuele > > Regards; > Leandro. > > <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> > Libre de virus. www.avast.com > <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop --------------D9AB2DD2363E74D33CE9B417 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body> <p>Hi Leandro,</p> <p>Please see below.<br> </p> <div class="moz-cite-prefix">On 10/17/19 4:39 PM, Leandro Roggerone wrote:<br> </div> <blockquote type="cite" cite="mid:CALt2oz5OLPSdYTOdMCn6==N16Vjd0B-yZqNtfMADeAWX0j3ShQ@mail.gmail.com"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <div dir="ltr">Hi guys, im here trying to find a replacement for my nfsen / nfdump platform. <div>Im trying free version of ntop-ng , so here are some questions:<br> <br> </div> <div>1) How to properly create a netflow analisis platform with ntop-ng?</div> <div>I already installed ntop-ng + nprobe packages.</div> <div>It seems to work ok but , but flows are limite to 25k.</div> <div>Is there some free version for this ?</div> </div> </blockquote> nprobe does not have a free version. If you need a demo license for testing please contact us <a class="moz-txt-link-freetext" href="https://www.ntop.org/support/need-help-2/contact-us">https://www.ntop.org/support/need-help-2/contact-us</a> .<br> <blockquote type="cite" cite="mid:CALt2oz5OLPSdYTOdMCn6==N16Vjd0B-yZqNtfMADeAWX0j3ShQ@mail.gmail.com"> <div dir="ltr"> <div><br> </div> <div>2) Is it possible to create custom traffic profiles from netflow data ? </div> <div>For instance , I use to create some filters like:</div> <div>src net x.x.x.x/24 and out if 13.</div> <div>It seems to be a similar feature but it is only available at pro version.</div> </div> </blockquote> BPF like filters are only available in the ntopng pro version<br> <blockquote type="cite" cite="mid:CALt2oz5OLPSdYTOdMCn6==N16Vjd0B-yZqNtfMADeAWX0j3ShQ@mail.gmail.com"> <div dir="ltr"> <div><br> </div> <div>3) How can I analize my traffic?</div> <div>Is it possible to filter (as above) and sort by flow duration , traffic rate, etc.</div> <div>If so , please provide some howto, I can not get it.</div> </div> </blockquote> <p>Please check out the following links</p> <a class="moz-txt-link-freetext" href="https://www.ntop.org/guides/ntopng/advanced_features/flows_dump.html">https://www.ntop.org/guides/ntopng/advanced_features/flows_dump.html</a><br> <a class="moz-txt-link-freetext" href="https://www.ntop.org/guides/ntopng/historical_flows.html">https://www.ntop.org/guides/ntopng/historical_flows.html</a> <p>Regards,</p> <p>Emanuele<br> </p> <blockquote type="cite" cite="mid:CALt2oz5OLPSdYTOdMCn6==N16Vjd0B-yZqNtfMADeAWX0j3ShQ@mail.gmail.com"> <div dir="ltr"> <div><br> </div> <div>Regards;</div> <div>Leandro.</div> </div> <div id="DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br> <table style="border-top:1px solid #d3d4de"> <tbody> <tr> <td style="width:55px;padding-top:18px"><a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" target="_blank" moz-do-not-send="true"><img src="https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif" alt="" style="width: 46px; height: 29px;" moz-do-not-send="true" width="46" height="29"></a></td> <td style="width:470px;padding-top:17px;color:#41424e;font-size:13px;font-family:Arial,Helvetica,sans-serif;line-height:18px">Libre de virus. <a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" target="_blank" style="color:#4453ea" moz-do-not-send="true">www.avast.com</a> </td> </tr> </tbody> </table> </div> <br> <fieldset class="mimeAttachmentHeader"></fieldset> <pre class="moz-quote-pre" wrap="">_______________________________________________ Ntop mailing list <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> <a class="moz-txt-link-freetext" href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/mailman/listinfo/ntop</a></pre> </blockquote> </body> </html> --------------D9AB2DD2363E74D33CE9B417-- --===============0611082204138521139== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop --===============0611082204138521139==--