Re: Ntop+Nprobe: the floods decrease to zero in some minutes

Roberto Carna <[email protected]> Tue, 12 Nov 2019 12:14:18 -0300
Newsgroups gmane.linux.ntop.general
Message-ID <CAG2Qp6sAhxHgqyGGYYSA4JmdtFpu6F1Wywg9js9cK1i4rNPEpg@mail.gmail.com>
--===============5399387432827386844==
Content-Type: multipart/alternative; boundary="0000000000005eb8e3059727b4ed"

--0000000000005eb8e3059727b4ed
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Dear, I can see in /var/log/syslog:

Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:585]
ERROR:
***************************************************************************
Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:586]
ERROR: * NOTE: You have reached the max demo 25000 flows export: no more
exports *
Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:588]
ERROR: * NOTE: no additional flows will be exported by this nProbe instance
     *
Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:589]
ERROR:
***************************************************************************

Do I have to pay for Nprobe ?

El mar., 12 nov. 2019 a las 11:47, Roberto Carna (<[email protected]=
>)
escribi=C3=B3:

> Dear, I have a server with Debian 10 + Ntopng 3.9 + Nprobe 8.7 in
> "collector mode".
>
> My config is:
>
> /etc/ntopng/ntopng.conf:
>
> -G=3D/var/run/ntopng.pid
> -e=3D
> -i=3D"tcp://127.0.0.1:5556"
> -w=3D3000
> -m=3D172.31.10.0/24,179.0.141.0/24
> -n=3D1
> -S=3D
> -d=3D/var/lib/ntopng
> -q=3D
> --community
>
> /etc/nprobe/nprobe.conf:
>
> -i=3Dnone
> --collector-port=3D2055
> --zmq=3Dtcp://*:5556
> -n=3Dnone
> -T=3D@NTOPNG@
> -g=3D/var/run/nprobe.pid
>
> I start both service with "systemctl nprobe start" and "systemctl ntopng
> start".
>
> Everything is OK, I can see a lot of flows in Ntopng interface.
>
> But after some minutes, the flows decrease and they come to 0 (zero), and
> this value remains just like this forever.
>
> Please can you help me ???
>
> Thanks a lot !!!
>

--0000000000005eb8e3059727b4ed
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Dear, I can see in /var/log/syslog:<div><br></div><div>Nov=
 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:585] ERROR: =
***************************************************************************=
<br>Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:586] =
ERROR: * NOTE: You have reached the max demo 25000 flows export: no more ex=
ports *<br>Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.=
c:588] ERROR: * NOTE: no additional flows will be exported by this nProbe i=
nstance =C2=A0 =C2=A0 =C2=A0*<br>Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/=
2019 12:05:35 [export.c:589] ERROR: ***************************************=
************************************<br></div><div><br></div><div>Do I have=
 to pay for Nprobe ?</div></div><br><div class=3D"gmail_quote"><div dir=3D"=
ltr" class=3D"gmail_attr">El mar., 12 nov. 2019 a las 11:47, Roberto Carna =
(&lt;<a href=3D"mailto:[email protected]">[email protected]</=
a>&gt;) escribi=C3=B3:<br></div><blockquote class=3D"gmail_quote" style=3D"=
margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-lef=
t:1ex"><div dir=3D"ltr">Dear, I have a server with Debian 10=C2=A0+ Ntopng =
3.9=C2=A0+ Nprobe 8.7 in &quot;collector mode&quot;.<div><br></div><div>My =
config is:</div><div><br></div><div>/etc/ntopng/ntopng.conf:</div><div><br>=
</div><div>-G=3D/var/run/ntopng.pid<br>-e=3D<br>-i=3D&quot;tcp://<a href=3D=
"http://127.0.0.1:5556" target=3D"_blank">127.0.0.1:5556</a>&quot;<br>-w=3D=
3000<br>-m=3D<a href=3D"http://172.31.10.0/24,179.0.141.0/24" target=3D"_bl=
ank">172.31.10.0/24,179.0.141.0/24</a><br>-n=3D1<br>-S=3D<br>-d=3D/var/lib/=
ntopng<br>-q=3D<br>--community<br></div><div><br></div><div>/etc/nprobe/npr=
obe.conf:</div><div><br></div><div>-i=3Dnone<br>--collector-port=3D2055<br>=
--zmq=3Dtcp://*:5556<br>-n=3Dnone<br>-T=3D@NTOPNG@<br>-g=3D/var/run/nprobe.=
pid<br></div><div><br></div><div>I start both service with &quot;systemctl =
nprobe start&quot; and &quot;systemctl ntopng start&quot;.</div><div><br></=
div><div>Everything is OK, I can see a lot of flows in Ntopng interface.=C2=
=A0</div><div><br></div><div>But after some minutes, the flows decrease and=
 they come to 0 (zero), and this value remains just like this forever.</div=
><div><br></div><div>Please can you help me ???</div><div><br></div><div>Th=
anks a lot !!!</div></div>
</blockquote></div>

--0000000000005eb8e3059727b4ed--

--===============5399387432827386844==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
--===============5399387432827386844==--