[prev in list] [next in list] [prev in thread] [next in thread]
List: ntop
Subject: Re: [Ntop] empty web interface
From: Luca Deri <deri () ntop ! org>
Date: 2014-01-15 18:21:29
Message-ID: 962536F5-B4BB-4A26-AC22-60EB172CAF8A () ntop ! org
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Thanks for reporting the issue and the patch. I have realised that the collector \
interface was without a code that waits the interface to be up.
The new code is in SVN
Cheers Luca
On 15 Jan 2014, at 14:59, Marc Boisis <marc.boisis@univ-lr.fr> wrote:
> I’ve found a workaround !!!
>
> In the file CollectorInterface.cpp , in the function : startPacketPolling. You \
> first start the polling thread which is doing collect_flows. collect_flows need \
> isRunnig to be set to true. But the running variable is set to true \
> NetworkInterface::startPacketPolling();
> It can work if the thread is starting slowly.
>
> So I invert the two lines like this:
> void CollectorInterface::startPacketPolling() {
> NetworkInterface::startPacketPolling();
> pthread_create(&pollLoop, NULL, packetPollLoop, (void*)this);
> }
>
> I don’t know if there is any side effect but it’s working. What do you think about \
> it ?
>
>
>
> Marc Boisis-Delavaud
> Direction du Système d'Information
> Université de La Rochelle
> marc.boisis@univ-lr.fr | 05 46 45 82 14
>
> Le 15 janv. 2014 à 11:50, Marc Boisis <marc.boisis@univ-lr.fr> a écrit :
>
> > It’s very strange...
> >
> > Yesteday I success to have ntopng working with these exact commands:
> >
> > nprobe -b 1 --collector-port 2055 --zmq "tcp://*:5556" -n none --disable-cache \
> > -V 5 --dont-drop-privileges -i none ntopng -i "tcp://127.0.0.1:5556" -s --verbose \
> > -m "192.168.1.0/24 »
> > Ok it worked, so I decided to stop the process to set off verbose and since …. \
> > ntopng refuse to work even with or without verbose It only show this messages :
> > 15/Jan/2014 10:33:02 [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:03 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:04 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:05 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:06 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:07 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:08 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:09 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:10 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:11 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:12 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:13 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:14 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua 15/Jan/2014 10:33:15 \
> > [PeriodicActivities.cpp:91] Starting script \
> > /usr/local/share/ntopng/scripts/callbacks/second.lua
> >
> >
> > Marc Boisis-Delavaud
> > Direction du Système d'Information
> > Université de La Rochelle
> > marc.boisis@univ-lr.fr | 05 46 45 82 14
> >
> > Le 15 janv. 2014 à 09:47, Luca Deri <deri@ntop.org> a écrit :
> >
> > > Marc
> > > I have just tested again
> > >
> > > 1. stared nprobe as follow
> > > nprobe --zmq "tcp://*:5556”
> > >
> > > then
> > > 2. I have started ntopng (latest svn code)
> > > ntopng -i tcp://127.0.0.1:5556 -v
> > >
> > > And I see flows coming
> > >
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [8]=[54.247.120.211]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [12]=[192.168.1.92]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [15]=[0.0.0.0]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 15
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [10]=[65535]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 10
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [14]=[65535]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 14
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [2]=[1]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [1]=[598]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [22]=[1389775594]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [21]=[1389775594]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [7]=[80]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [11]=[50292]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [6]=[24]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [4]=[6]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [5]=[0]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 5
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [16]=[16509]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 16
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [17]=[0]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 17
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [9]=[0]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 9
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [13]=[0]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 13
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [42]=[103]
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 42
> > > 15/Jan/2014 09:46:36 [CollectorInterface.cpp:229] [202] {"8":"54.247.120.211”,
> > >
> > > Regards Luca
> > >
> > > On 13 Jan 2014, at 15:59, Marc Boisis <marc.boisis@univ-lr.fr> wrote:
> > >
> > > > I’ve listened with tcpdump/wireshark on 127.0.0.1 port 5556 and I see the \
> > > > flows in the communication. So I think ntopng have a problem to read them.
> > > > 15:58:46.545957 IP (tos 0x0, ttl 64, id 4527, offset 0, flags [DF], proto TCP \
> > > > (6), length 7066) 127.0.0.1.5556 > 127.0.0.1.38103: P, cksum 0x198f \
> > > > (incorrect (-> 0xf498), 92:7106(7014) ack 99 win 256 <nop,nop,timestamp \
> > > > 217252798 217252021> 0x0000: 4500 1b9a 11af 4000 4006 0fad 7f00 0001 \
> > > > E.....@.@....... 0x0010: 7f00 0001 15b4 94d7 1196 117a 11ad 69c1 \
> > > > ...........z..i. 0x0020: 8018 0100 198f 0000 0101 080a 0cf3 03be \
> > > > ................ 0x0030: 0cf3 00b5 0128 666c 6f77 0000 0000 e140 \
> > > > .....(flow.....@ 0x0040: cc98 8e47 4c17 0800 0000 0000 0000 0100 \
> > > > ...GL........... 0x0050: 0000 0000 0000 0000 0000 bd00 0000 00bd \
> > > > ................ 0x0060: 7b22 3822 3a22 3130 2e31 302e 3331 2e31 \
> > > > {"8":"10.10.31.1 0x0070: 3030 222c 2231 3222 3a22 3130 2e31 2e39 \
> > > > 00","12":"10.1.9 0x0080: 302e 3137 222c 2231 3522 3a22 302e 302e \
> > > > 0.17","15":"0.0. 0x0090: 302e 3022 2c22 3130 223a 302c 2231 3422 \
> > > > 0.0","10":0,"14" 0x00a0: 3a30 2c22 3222 3a35 2c22 3122 3a35 3038 \
> > > > :0,"2":5,"1":508 0x00b0: 2c22 3232 223a 3133 3839 3632 3530 3536 \
> > > > ,"22":1389625056 0x00c0: 2c22 3231 223a 3133 3839 3632 3530 3936 \
> > > > ,"21":1389625096 0x00d0: 2c22 3722 3a31 3335 2c22 3131 223a 3431 \
> > > > ,"7":135,"11":41 0x00e0: 3231 2c22 3622 3a30 2c22 3422 3a36 2c22 \
> > > > 21,"6":0,"4":6," 0x00f0: 3522 3a30 2c22 3136 223a 302c 2231 3722 \
> > > > 5":0,"16":0,"17" 0x0100: 3a30 2c22 3922 3a30 2c22 3133 223a 302c \
> > > > :0,"9":0,"13":0, 0x0110: 2234 3222 3a31 3933 3038 3631 7d01 2866 \
> > > > "42":1930861}.(f 0x0120: 6c6f 7700 0000 00e1 40cc 988e 474c 1708 \
> > > > low.....@...GL.. 0x0130: 0000 0000 0000 0001 0000 0000 0000 0000 \
> > > > ................ 0x0140: 0000 00bd 0000 0000 bd7b 2238 223a 2231 \
> > > > .........{"8":"1 0x0150: 302e 312e 3930 2e31 3722 2c22 3132 223a \
> > > > 0.1.90.17","12": 0x0160: 2231 302e 3130 2e33 312e 3130 3022 2c22 \
> > > > "10.10.31.100"," 0x0170: 3135 223a 2230 2e30 2e30 2e30 222c 2231 \
> > > > 15":"0.0.0.0","1 0x0180: 3022 3a30 2c22 3134 223a 302c 2232 223a \
> > > > 0":0,"14":0,"2": 0x0190: 372c 2231 223a 3531 362c 2232 3222 3a31 \
> > > > 7,"1":516,"22":1 0x01a0: 3338 3936 3235 3035 362c 2232 3122 3a31 \
> > > > 389625056,"21":1 0x01b0: 3338 3936 3235 3039 362c 2237 223a 3431 \
> > > > 389625096,"7":41 0x01c0: 3231 2c22 3131 223a 3133 352c 2236 223a \
> > > > 21,"11":135,"6": 0x01d0: 302c 2234 223a 362c 2235 223a 302c 2231 \
> > > > 0,"4":6,"5":0,"1 0x01e0: 3622 3a30 2c22 3137 223a 302c 2239 223a \
> > > > 6":0,"17":0,"9": 0x01f0: 302c 2231 3322 3a30 2c22 3432 223a 3139 \
> > > > 0,"13":0,"42":19 0x0200: 3330 3836 327d 0128 666c 6f77 0000 0000 \
> > > > 30862}.(flow.... 0x0210: e140 cc98 8e47 4c17 0800 0000 0000 0000 \
> > > > .@...GL......... 0x0220: 0100 0000 0000 0000 0000 0000 c200 0000 \
> > > > ................
> > > >
> > > >
> > > >
> > > > Marc Boisis-Delavaud
> > > > Direction du Système d'Information
> > > > Université de La Rochelle
> > > > marc.boisis@univ-lr.fr | 05 46 45 82 14
> > > >
> > > > Le 13 janv. 2014 à 15:19, Luca Deri <deri@ntop.org> a écrit :
> > > >
> > > > > yes you can write a simple app/script that does it, but I would encourage \
> > > > > you to rather debug ntopng and see why it does not receive flows
> > > > > Luca
> > > > > On 13 Jan 2014, at 15:16, Marc Boisis <marc.boisis@univ-lr.fr> wrote:
> > > > >
> > > > > > I really don’t know
> > > > > >
> > > > > > nprobe output is like this :
> > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > {"8":"10.10.31.79","12":"10.1.90.5","15":"0.0.0.0","10":0,"14":0,"2":4,"1" \
> > > > > > :237,"22":1389352165,"21":1389352171,"7":13111,"11":50478,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393287}
> > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > {"8":"10.1.90.5","12":"10.10.31.79","15":"0.0.0.0","10":0,"14":0,"2":5,"1" \
> > > > > > :361,"22":1389352165,"21":1389352171,"7":50478,"11":13111,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393288}
> > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > {"8":"10.10.31.79","12":"10.1.31.77","15":"0.0.0.0","10":0,"14":0,"2":4,"1 \
> > > > > > ":238,"22":1389352165,"21":1389352171,"7":13111,"11":60337,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393289}
> > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > {"8":"10.1.31.77","12":"10.10.31.79","15":"0.0.0.0","10":0,"14":0,"2":5,"1 \
> > > > > > ":341,"22":1389352165,"21":1389352171,"7":60337,"11":13111,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393290}
> > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > {"8":"10.10.31.79","12":"10.1.70.27","15":"0.0.0.0","10":0,"14":0,"2":4,"1 \
> > > > > > ":238,"22":1389352165,"21":1389352171,"7":13111,"11":65102,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393291}
> > > > > >
> > > > > > 10/Jan/2014 12:10:01 [nprobe.c:2050] Flow export stats: [0 bytes/0 \
> > > > > > pkts][0 flows/0 pkts sent] 10/Jan/2014 12:10:01 [nprobe.c:2057] Flow \
> > > > > > collection: [collected pkts: 13110][processed flows: 393300] 10/Jan/2014 \
> > > > > > 12:10:01 [nprobe.c:2060] Flow drop stats: [0 bytes/0 pkts][0 flows] \
> > > > > > 10/Jan/2014 12:10:01 [nprobe.c:2065] Total flow stats: [0 bytes/0 \
> > > > > > pkts][0 flows/0 pkts sent]
> > > > > >
> > > > > > is it possible to listen the zmq socket traffic ?
> > > > > >
> > > > > >
> > > > > > Marc Boisis-Delavaud
> > > > > > Direction du Système d'Information
> > > > > > Université de La Rochelle
> > > > > > marc.boisis@univ-lr.fr | 05 46 45 82 14
> > > > > >
> > > > > > Le 13 janv. 2014 à 14:56, Luca Deri <deri@ntop.org> a écrit :
> > > > > >
> > > > > > >
> > > > > > > On 13 Jan 2014, at 13:54, Marc Boisis <marc.boisis@univ-lr.fr> wrote:
> > > > > > >
> > > > > > > > I’ve upgraded ntopng with the latest SVN version and the result is \
> > > > > > > > différent but no better !
> > > > > > > > The message Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua is being \
> > > > > > > > repeated time and time again.
> > > > > > > this is ok
> > > > > > >
> > > > > > > I suspect that no flows are received as otherwise you should have seen \
> > > > > > > something on the screen. Is nprobe sending flows towards ntopng?
> > > > > > > Luca
> > > > > > > >
> > > > > > > > > ntopng -i tcp://127.0.0.1:5556 -s -v
> > > > > > > > 13/Jan/2014 08:42:57 [Ntop.cpp:468] Setting local networks to \
> > > > > > > > 192.168.1.0/24,0.0.0.0/32,224.0.0.0/8,239.0.0.0/8,255.255.255.255/32,127.0.0.0/8
> > > > > > > > 13/Jan/2014 08:42:57 [AddressResolution.cpp:131] Rule \
> > > > > > > > '192.168.1.0'/'24' 13/Jan/2014 08:42:57 [AddressResolution.cpp:131] \
> > > > > > > > Rule '0.0.0.0'/'32' 13/Jan/2014 08:42:57 [AddressResolution.cpp:131] \
> > > > > > > > Rule '224.0.0.0'/'8' 13/Jan/2014 08:42:57 [AddressResolution.cpp:131] \
> > > > > > > > Rule '239.0.0.0'/'8' 13/Jan/2014 08:42:57 [AddressResolution.cpp:131] \
> > > > > > > > Rule '255.255.255.255'/'32' 13/Jan/2014 08:42:57 \
> > > > > > > > [AddressResolution.cpp:131] Rule '127.0.0.0'/'8' 13/Jan/2014 08:42:57 \
> > > > > > > > [Ntop.cpp:575] Registered interface collector@127.0.0.1:5556 [id: 0] \
> > > > > > > > 13/Jan/2014 08:42:57 [main.cpp:149] PID stored in file \
> > > > > > > > /var/tmp/ntopng.pid 13/Jan/2014 08:42:57 [HTTPserver.cpp:363] HTTP \
> > > > > > > > server listening on port 3000 \
> > > > > > > > [/usr/local/share/ntopng/httpdocs][/usr/local/share/ntopng/scripts] \
> > > > > > > > 13/Jan/2014 08:42:57 [main.cpp:183] Using RRD version 1.3.4 \
> > > > > > > > 13/Jan/2014 08:42:57 [main.cpp:192] Working directory: \
> > > > > > > > /var/tmp/ntopng 13/Jan/2014 08:42:57 [main.cpp:194] Scripts/HTML \
> > > > > > > > pages directory: /usr/local/share/ntopng 13/Jan/2014 08:42:57 \
> > > > > > > > [Ntop.cpp:164] Welcome to ntopng x86_64 v.1.1.1 (r7173) - (C) 1998-13 \
> > > > > > > > ntop.org 13/Jan/2014 08:42:57 [Redis.cpp:47] Successfully connected \
> > > > > > > > to Redis 127.0.0.1:6379 13/Jan/2014 08:42:57 \
> > > > > > > > [PeriodicActivities.cpp:53] Started periodic activities loop... \
> > > > > > > > 13/Jan/2014 08:42:57 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua 13/Jan/2014 \
> > > > > > > > 08:42:57 [CollectorInterface.cpp:100] Collecting flows... 13/Jan/2014 \
> > > > > > > > 08:42:57 [CollectorInterface.cpp:233] Flow collection is over. \
> > > > > > > > 13/Jan/2014 08:42:57 [NetworkInterface.cpp:636] Started packet \
> > > > > > > > polling on interface collector@127.0.0.1:5556... 13/Jan/2014 08:42:58 \
> > > > > > > > [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua 13/Jan/2014 \
> > > > > > > > 08:42:59 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua 13/Jan/2014 \
> > > > > > > > 08:43:00 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/minute.lua 13/Jan/2014 \
> > > > > > > > 08:43:00 [Lua.cpp:1691] [minute.lua] Processing interface \
> > > > > > > > collector_127.0.0.1_5556 13/Jan/2014 08:43:00 [Lua.cpp:1691] \
> > > > > > > > [minute.lua] Creating \
> > > > > > > > /var/tmp/ntopng/collector_127.0.0.1_5556/top_talkers/2014/01/13/08/43.json
> > > > > > > > 13/Jan/2014 08:43:00 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua 13/Jan/2014 \
> > > > > > > > 08:43:01 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua 13/Jan/2014 \
> > > > > > > > 08:43:02 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua 13/Jan/2014 \
> > > > > > > > 08:43:03 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua 13/Jan/2014 \
> > > > > > > > 08:43:04 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua 13/Jan/2014 \
> > > > > > > > 08:43:05 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua 13/Jan/2014 \
> > > > > > > > 08:43:06 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > /usr/local/share/ntopng/scripts/callbacks/second.lua
> > > > > > > >
> > > > > > > >
> > > > > > > > Marc Boisis-Delavaud
> > > > > > > > Direction du Système d'Information
> > > > > > > > Université de La Rochelle
> > > > > > > > marc.boisis@univ-lr.fr | 05 46 45 82 14
> > > > > > > >
> > > > > > > > Le 10 janv. 2014 à 17:50, Luca Deri <deri@ntop.org> a écrit :
> > > > > > > >
> > > > > > > > > Marc,
> > > > > > > > > all you do is correct.
> > > > > > > > >
> > > > > > > > > I suggest to use the latest ntopng code in SVN that works for me:
> > > > > > > > >
> > > > > > > > > nProbe
> > > > > > > > > 10/Jan/2014 17:50:28 [engine.c:2366] Emitting Flow: [->][tcp] \
> > > > > > > > > 192.168.1.92:54826 -> 173.194.35.37:80 [2 pkt/104 bytes][ifIdx \
> > > > > > > > > 65535->65535][duration 0.0 sec][init Unknown] 10/Jan/2014 17:50:28 \
> > > > > > > > > [util.c:3527] [ZMQ] \
> > > > > > > > > {"8":"173.194.35.37","12":"192.168.1.92","15":"0.0.0.0","10":65535," \
> > > > > > > > > 14":65535,"2":1,"1":52,"22":1389372623,"21":1389372623,"7":80,"11":54826,"6":17,"4":6,"5":0,"16":15169,"17":0,"9":0,"13":0,"42":304}
> > > > > > > > > 10/Jan/2014 17:50:28 [engine.c:2388] Emitting Flow: [<-][tcp] \
> > > > > > > > > 173.194.35.37:80 -> 192.168.1.92:54826 [1 pkt/52 bytes][ifIdx \
> > > > > > > > > 65535->65535][0.0 sec] 10/Jan/2014 17:50:28 [util.c:3527] [ZMQ] \
> > > > > > > > > {"8":"192.168.1.92","12":"173.194.35.60","15":"0.0.0.0","10":65535," \
> > > > > > > > > 14":65535,"2":2,"1":104,"22":1389372623,"21":1389372623,"7":54790,"11":80,"6":17,"4":6,"5":0,"16":0,"17":15169,"9":0,"13":0,"42":305}
> > > > > > > > > 10/Jan/2014 17:50:28 [engine.c:2366] Emitting Flow: [->][tcp] \
> > > > > > > > > 192.168.1.92:54790 -> 173.194.35.60:80 [2 pkt/104 bytes][ifIdx \
> > > > > > > > > 65535->65535][duration 0.0 sec][init Unknown] 10/Jan/2014 17:50:28 \
> > > > > > > > > [util.c:3527] [ZMQ] \
> > > > > > > > > {"8":"173.194.35.60","12":"192.168.1.92","15":"0.0.0.0","10":65535," \
> > > > > > > > > 14":65535,"2":1,"1":52,"22":1389372623,"21":1389372623,"7":80,"11":54790,"6":17,"4":6,"5":0,"16":15169,"17":0,"9":0,"13":0,"42":306}
> > > > > > > > > 10/Jan/2014 17:50:28 [engine.c:2388] Emitting Flow: [<-][tcp] \
> > > > > > > > > 173.194.35.60:80 -> 192.168.1.92:54790 [1 pkt/52 bytes][ifIdx \
> > > > > > > > > 65535->65535][0.0 sec] 10/Jan/2014 17:50:30 [engine.c:2198] New \
> > > > > > > > > Flow: [tcp] 192.168.1.92:53836 -> 146.48.98.155:993 \
> > > > > > > > > [00:00:00:00:00:00 -> 00:00:00:00:00:00][vlan 0][tos 0][ifIdx: \
> > > > > > > > > 65535 -> 65535][subflowId: 0/0x0000][idx=80426]
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > deri@iMacLuca 204> ./ntopng -i tcp://127.0.0.1:5556 -s -v
> > > > > > > > > 10/Jan/2014 17:50:22 [Ntop.cpp:468] Setting local networks to \
> > > > > > > > > 192.168.1.0/24,0.0.0.0/32,224.0.0.0/8,239.0.0.0/8,255.255.255.255/32,127.0.0.0/8
> > > > > > > > > 10/Jan/2014 17:50:22 [AddressResolution.cpp:131] Rule \
> > > > > > > > > '192.168.1.0'/'24' 10/Jan/2014 17:50:22 [AddressResolution.cpp:131] \
> > > > > > > > > Rule '0.0.0.0'/'32' 10/Jan/2014 17:50:22 \
> > > > > > > > > [AddressResolution.cpp:131] Rule '224.0.0.0'/'8' 10/Jan/2014 \
> > > > > > > > > 17:50:22 [AddressResolution.cpp:131] Rule '239.0.0.0'/'8' \
> > > > > > > > > 10/Jan/2014 17:50:22 [AddressResolution.cpp:131] Rule \
> > > > > > > > > '255.255.255.255'/'32' 10/Jan/2014 17:50:22 \
> > > > > > > > > [AddressResolution.cpp:131] Rule '127.0.0.0'/'8' 10/Jan/2014 \
> > > > > > > > > 17:50:22 [Ntop.cpp:575] Registered interface \
> > > > > > > > > collector@127.0.0.1:5556 [id: 0] 10/Jan/2014 17:50:22 \
> > > > > > > > > [main.cpp:149] PID stored in file /var/tmp/ntopng.pid 10/Jan/2014 \
> > > > > > > > > 17:50:22 [HTTPserver.cpp:363] HTTP server listening on port 3000 \
> > > > > > > > > [/Volumes/1TB/Users/deri/network/ntopng/httpdocs][/Volumes/1TB/Users/deri/network/ntopng/scripts]
> > > > > > > > > 10/Jan/2014 17:50:22 [main.cpp:183] Using RRD version 1.4.7
> > > > > > > > > 10/Jan/2014 17:50:22 [main.cpp:192] Working directory: \
> > > > > > > > > /var/tmp/ntopng 10/Jan/2014 17:50:22 [main.cpp:194] Scripts/HTML \
> > > > > > > > > pages directory: /Volumes/1TB/Users/deri/network/ntopng 10/Jan/2014 \
> > > > > > > > > 17:50:22 [Ntop.cpp:164] Welcome to ntopng x86_64 v.1.1.1 (r7161) - \
> > > > > > > > > (C) 1998-13 ntop.org 10/Jan/2014 17:50:22 [Redis.cpp:47] \
> > > > > > > > > Successfully connected to Redis 127.0.0.1:6379 10/Jan/2014 17:50:22 \
> > > > > > > > > [PeriodicActivities.cpp:53] Started periodic activities loop... \
> > > > > > > > > 10/Jan/2014 17:50:22 [NetworkInterface.cpp:636] Started packet \
> > > > > > > > > polling on interface collector@127.0.0.1:5556... 10/Jan/2014 \
> > > > > > > > > 17:50:22 [CollectorInterface.cpp:100] Collecting flows... \
> > > > > > > > > 10/Jan/2014 17:50:22 [PeriodicActivities.cpp:91] Starting script \
> > > > > > > > > /Volumes/1TB/Users/deri/network/ntopng/scripts/callbacks/second.lua \
> > > > > > > > > 10/Jan/2014 17:50:22 [CollectorInterface.cpp:145] \
> > > > > > > > > [8]=[192.168.1.92] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [12]=[146.48.98.155] 10/Jan/2014 \
> > > > > > > > > 17:50:22 [CollectorInterface.cpp:145] [15]=[0.0.0.0] 10/Jan/2014 \
> > > > > > > > > 17:50:22 [CollectorInterface.cpp:208] Not handled ZMQ field 15 \
> > > > > > > > > 10/Jan/2014 17:50:22 [CollectorInterface.cpp:145] [10]=[65535] \
> > > > > > > > > 10/Jan/2014 17:50:22 [CollectorInterface.cpp:208] Not handled ZMQ \
> > > > > > > > > field 10 10/Jan/2014 17:50:22 [CollectorInterface.cpp:145] \
> > > > > > > > > [14]=[65535] 10/Jan/2014 17:50:22 [CollectorInterface.cpp:208] Not \
> > > > > > > > > handled ZMQ field 14 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [2]=[1] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [1]=[174] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [22]=[1389372617] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [21]=[1389372617] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [7]=[53836] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [11]=[993] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [6]=[24] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [4]=[6] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:145] [5]=[0] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:208] Not handled ZMQ field 5 10/Jan/2014 \
> > > > > > > > > 17:50:22 [CollectorInterface.cpp:145] [16]=[0] 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:208] Not handled ZMQ field 16 10/Jan/2014 \
> > > > > > > > > 17:50:22 [CollectorInterface.cpp:145] [17]=[137] 10/Jan/2014 \
> > > > > > > > > 17:50:22 [CollectorInterface.cpp:208] Not handled ZMQ field 17 \
> > > > > > > > > 10/Jan/2014 17:50:22 [CollectorInterface.cpp:145] [9]=[0] \
> > > > > > > > > 10/Jan/2014 17:50:22 [CollectorInterface.cpp:208] Not handled ZMQ \
> > > > > > > > > field 9 10/Jan/2014 17:50:22 [CollectorInterface.cpp:145] [13]=[0]
> > > > > > > > > 10/Jan/2014 17:50:22 [CollectorInterface.cpp:208] Not handled ZMQ \
> > > > > > > > > field 13 10/Jan/2014 17:50:22 [CollectorInterface.cpp:145] \
> > > > > > > > > [42]=[276] 10/Jan/2014 17:50:22 [CollectorInterface.cpp:208] Not \
> > > > > > > > > handled ZMQ field 42 10/Jan/2014 17:50:22 \
> > > > > > > > > [CollectorInterface.cpp:229] [200] \
> > > > > > > > > {"8":"192.168.1.92","12":"146.48.98.155","15":"0.0.0.0","10":65535," \
> > > > > > > > > 14":65535,"2":1,"1":174,"22":1389372617,"21":1389372617,"7":53836,"11":993,"6":24,"4":6,"5":0,"16":0,"17":137,"9":0,"13":0,"42":276}
> > > > > > > > >
> > > > > > > > > Regards Luca
> > > > > > > > >
> > > > > > > > > On 10 Jan 2014, at 12:13, Marc Boisis <marc.boisis@univ-lr.fr> \
> > > > > > > > > wrote:
> > > > > > > > > > Hi
> > > > > > > > > > I want nprobe to run in proxy mode receiving only flow emitted by \
> > > > > > > > > > my openbsd/PF router. I don’t want it to capture traffic on his \
> > > > > > > > > > own interface. So I’m doing : nprobe -b 1 --collector-port 2055 \
> > > > > > > > > > --zmq "tcp://*:5556" -n none --disable-cache -V 9 \
> > > > > > > > > > --dont-drop-privileges -i none
> > > > > > > > > > Do you think it is correct ?
> > > > > > > > > >
> > > > > > > > > > Output like this :
> > > > > > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > > > > > {"8":"10.10.31.79","12":"10.1.90.5","15":"0.0.0.0","10":0,"14":0," \
> > > > > > > > > > 2":4,"1":237,"22":1389352165,"21":1389352171,"7":13111,"11":50478,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393287}
> > > > > > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > > > > > {"8":"10.1.90.5","12":"10.10.31.79","15":"0.0.0.0","10":0,"14":0," \
> > > > > > > > > > 2":5,"1":361,"22":1389352165,"21":1389352171,"7":50478,"11":13111,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393288}
> > > > > > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > > > > > {"8":"10.10.31.79","12":"10.1.31.77","15":"0.0.0.0","10":0,"14":0, \
> > > > > > > > > > "2":4,"1":238,"22":1389352165,"21":1389352171,"7":13111,"11":60337,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393289}
> > > > > > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > > > > > {"8":"10.1.31.77","12":"10.10.31.79","15":"0.0.0.0","10":0,"14":0, \
> > > > > > > > > > "2":5,"1":341,"22":1389352165,"21":1389352171,"7":60337,"11":13111,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393290}
> > > > > > > > > > 10/Jan/2014 12:10:01 [util.c:3517] [ZMQ] \
> > > > > > > > > > {"8":"10.10.31.79","12":"10.1.70.27","15":"0.0.0.0","10":0,"14":0, \
> > > > > > > > > > "2":4,"1":238,"22":1389352165,"21":1389352171,"7":13111,"11":65102,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393291}
> > > > > > > > > >
> > > > > > > > > > 10/Jan/2014 12:10:01 [nprobe.c:2050] Flow export stats: [0 \
> > > > > > > > > > bytes/0 pkts][0 flows/0 pkts sent] 10/Jan/2014 12:10:01 \
> > > > > > > > > > [nprobe.c:2057] Flow collection: [collected pkts: \
> > > > > > > > > > 13110][processed flows: 393300] 10/Jan/2014 12:10:01 \
> > > > > > > > > > [nprobe.c:2060] Flow drop stats: [0 bytes/0 pkts][0 flows] \
> > > > > > > > > > 10/Jan/2014 12:10:01 [nprobe.c:2065] Total flow stats: [0 \
> > > > > > > > > > bytes/0 pkts][0 flows/0 pkts sent]
> > > > > > > > > >
> > > > > > > > > > But ntopng which is running on the same machine is blind : ntopng \
> > > > > > > > > > -i tcp://127.0.0.1:5556 -s -v
> > > > > > > > > > 10/Jan/2014 12:07:23 [ProtoStats.cpp:35] [IPv4] 0 B/0.00 Packets
> > > > > > > > > > 10/Jan/2014 12:07:23 [ProtoStats.cpp:35] [IPv6] 0 B/0.00 Packets
> > > > > > > > > > 10/Jan/2014 12:07:23 [ProtoStats.cpp:35] [ARP] 0 B/0.00 Packets
> > > > > > > > > > 10/Jan/2014 12:07:23 [ProtoStats.cpp:35] [MPLS] 0 B/0.00 Packets
> > > > > > > > > > 10/Jan/2014 12:07:23 [ProtoStats.cpp:35] [Other] 0 B/0.00 Packets
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > Le 9 janv. 2014 à 16:18, Steve Clark <sclark@netwolves.com> a \
> > > > > > > > > > écrit :
> > > > > > > > > > > Hi Wayne,
> > > > > > > > > > >
> > > > > > > > > > > Glad it helped - yes it seems a little strange to me that is \
> > > > > > > > > > > seems nprobe has to be started first because it is the listener \
> > > > > > > > > > > and ntopng connects to nprobe which seems like it should be the \
> > > > > > > > > > > other way around.
> > > > > > > > > > > Is there a use case I am missing as to why it is this way?
> > > > > > > > > > >
> > > > > > > > > > > Thanks,
> > > > > > > > > > > Steve
> > > > > > > > > > >
> > > > > > > > > > > On 01/09/2014 09:36 AM, wayne.veilleux@videotron.ca wrote:
> > > > > > > > > > > > Steve, thanks for sending the way you start probe and ntopng \
> > > > > > > > > > > > because it solved my problem :)
> > > > > > > > > > > > Marc, here is what I did:
> > > > > > > > > > > >
> > > > > > > > > > > > On the Ubuntu 12.04 server where run nprobe:
> > > > > > > > > > > >
> > > > > > > > > > > > sudo nprobe -i eth1 --zmq tcp://192.168.1.33:5556 -b 1
> > > > > > > > > > > >
> > > > > > > > > > > > And, on the Ubuntu 12.04 server where run ntopng:
> > > > > > > > > > > >
> > > > > > > > > > > > sudo ntopng -l -s -i \
> > > > > > > > > > > > nprobe-collector.lua@tcp://192.168.1.33:5556 -d/var/tmp -w \
> > > > > > > > > > > > 3000 -n 0 -m 192.168.1.0/24 -v
> > > > > > > > > > > > Please note the IP address on both size is the IP address of \
> > > > > > > > > > > > the nprobe server. I hope that will help you.
> > > > > > > > > > > > Regards
> > > > > > > > > > > >
> > > > > > > > > > > > /Wayne
> > > > > > > > > > > >
> > > > > > > > > > > > Le 2014-01-09 à 04:38, Marc Boisis <marc.boisis@univ-lr.fr> a \
> > > > > > > > > > > > écrit :
> > > > > > > > > > > > > Hi,
> > > > > > > > > > > > >
> > > > > > > > > > > > > I’ve launched probe and ntopng like you but it change \
> > > > > > > > > > > > > nothing: web interface is still empty.
> > > > > > > > > > > > > In the npbrobe output, I can see this :
> > > > > > > > > > > > >
> > > > > > > > > > > > > 09/Jan/2014 09:37:01 [nprobe.c:2174] Average traffic: [0.00 \
> > > > > > > > > > > > > pps][0 b/sec] 09/Jan/2014 09:37:01 [nprobe.c:2181] Current \
> > > > > > > > > > > > > traffic: [0.00 pps][0 b/sec] 09/Jan/2014 09:37:01 \
> > > > > > > > > > > > > [nprobe.c:2187] Current flow export rate: [62.3 flows/sec] \
> > > > > > > > > > > > > 09/Jan/2014 09:37:01 [nprobe.c:2190] Flow drops: [export \
> > > > > > > > > > > > > queue too long=0][too many flows=0] 09/Jan/2014 09:37:01 \
> > > > > > > > > > > > > [nprobe.c:2194] Export Queue: 0/512000 [0.0 %] 09/Jan/2014 \
> > > > > > > > > > > > > 09:37:01 [nprobe.c:2199] Flow Buckets: \
> > > > > > > > > > > > > [active=334][allocated=334][toBeExported=0] 09/Jan/2014 \
> > > > > > > > > > > > > 09:37:01 [nprobe.c:2217] Collector Threads: [1155 pkts@0] \
> > > > > > > > > > > > > 09/Jan/2014 09:37:01 [nprobe.c:2041] Processed packets: 0 \
> > > > > > > > > > > > > (max bucket search: 1) 09/Jan/2014 09:37:01 [nprobe.c:2024] \
> > > > > > > > > > > > > Fragment queue length: 0 09/Jan/2014 09:37:01 \
> > > > > > > > > > > > > [nprobe.c:2050] Flow export stats: [0 bytes/0 pkts][0 \
> > > > > > > > > > > > > flows/0 pkts sent] 09/Jan/2014 09:37:01 [nprobe.c:2057] \
> > > > > > > > > > > > > Flow collection: [collected pkts: 1155][processed flows: \
> > > > > > > > > > > > > 34650] 09/Jan/2014 09:37:01 [nprobe.c:2060] Flow drop \
> > > > > > > > > > > > > stats: [0 bytes/0 pkts][0 flows]
> > > > > > > > > > > > > Are that stats saying flows are exported to ZMQ socket ??? \
> > > > > > > > > > > > > How can I see if flows are really emitted trough zmq socket \
> > > > > > > > > > > > > ?
> > > > > > > > > > > > >
> > > > > > > > > > > > > Marc Boisis-Delavaud
> > > > > > > > > > > > > Direction du Système d'Information
> > > > > > > > > > > > > Université de La Rochelle
> > > > > > > > > > > > > marc.boisis@univ-lr.fr | 05 46 45 82 14
> > > > > > > > > > > > >
> > > > > > > > > > > > > Le 8 janv. 2014 à 22:05, Steve Clark <sclark@netwolves.com> \
> > > > > > > > > > > > > a écrit :
> > > > > > > > > > > > > > Hi,
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > This worked for us:
> > > > > > > > > > > > > > sudo ./ntopng -l -s -i \
> > > > > > > > > > > > > > nprobe-collector.lua@tcp://192.168.198.127:5556 \
> > > > > > > > > > > > > > -d/var/tmp -w 3000 -n 0 -m \
> > > > > > > > > > > > > > 172.16.0.0/12,10.0.0.0/8,192.168.0.0/16 sudo nprobe -i \
> > > > > > > > > > > > > > eth1 --zmq tcp://192.168.198.127:5556
> > > > > > > > > > > > > > On 01/08/2014 04:02 PM, wayne.veilleux@videotron.ca \
> > > > > > > > > > > > > > wrote:
> > > > > > > > > > > > > > > I would also like to here any help on that because I’ve \
> > > > > > > > > > > > > > > also sent an email a few weeks ago regarding exactly \
> > > > > > > > > > > > > > > the same problem between probe and ntopng.
> > > > > > > > > > > > > > > Regards
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > /Wayne
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > Le 2014-01-08 à 15:59, Marc Boisis \
> > > > > > > > > > > > > > > <marc.boisis@univ-lr.fr> a écrit :
> > > > > > > > > > > > > > > > Hello
> > > > > > > > > > > > > > > > Can anyone gave me an idea or a method to show if \
> > > > > > > > > > > > > > > > ntopng receive or not flow send by nprobe ?
> > > > > > > > > > > > > > > > Le 7 janv. 2014 à 14:40, Marc Boisis \
> > > > > > > > > > > > > > > > <marc.boisis@univ-lr.fr> a écrit :
> > > > > > > > > > > > > > > > > Hello,
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > I want to show in ntop my flows emitted by an \
> > > > > > > > > > > > > > > > > openbsd router with PF packet filter.
> > > > > > > > > > > > > > > > > Ntopng and probe are installed on SLES server.
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > Nprobe is launched like this :
> > > > > > > > > > > > > > > > > nprobe --zmq tcp://127.0.0.1:5556 -i none -n none \
> > > > > > > > > > > > > > > > > --collector-port 2055 -V 9 -b 2
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [plugin.c:161] No plugins \
> > > > > > > > > > > > > > > > > found in ./plugins 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [plugin.c:161] No plugins found in \
> > > > > > > > > > > > > > > > > /usr/local/lib/nprobe/plugins 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [plugin.c:165] WARNING: Unable to find plugins \
> > > > > > > > > > > > > > > > > directory. nProbe will work without plugins! \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [nprobe.c:3624] Succesfully \
> > > > > > > > > > > > > > > > > created ZMQ endpoint tcp://127.0.0.1:5556 \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [nprobe.c:3787] WARNING: The \
> > > > > > > > > > > > > > > > > output interfaceId is set to 0: did you forget to \
> > > > > > > > > > > > > > > > > use -Q perhaps ? 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:3790] WARNING: The input interfaceId is \
> > > > > > > > > > > > > > > > > set to 0: did you forget to use -u perhaps ? \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [nprobe.c:3794] WARNING: You \
> > > > > > > > > > > > > > > > > have specified --zmq and not specified -n. \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [nprobe.c:3795] WARNING: We \
> > > > > > > > > > > > > > > > > believe you want to use just ZMQ and no netflow \
> > > > > > > > > > > > > > > > > export 07/Jan/2014 14:27:43 [nprobe.c:3796] \
> > > > > > > > > > > > > > > > > WARNING: Setting flow export to -n none 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:27:43 [nprobe.c:3850] Welcome to nprobe \
> > > > > > > > > > > > > > > > > v.6.15.140103 ($Revision: 3788 $) for \
> > > > > > > > > > > > > > > > > x86_64-suse-linux-gnu 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:3878] Tracing enabled 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:27:43 [plugin.c:225] 0 plugin(s) loaded [0 \
> > > > > > > > > > > > > > > > > delete][0 packet]. 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:5725] Welcome to nprobe v.6.15.140103 for \
> > > > > > > > > > > > > > > > > x86_64-suse-linux-gnu 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:4963] Compiling flow templates... \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [nprobe.c:4993] WARNING: You \
> > > > > > > > > > > > > > > > > selected v9/IPFIX without specifying a template \
> > > > > > > > > > > > > > > > > (-T). 07/Jan/2014 14:27:43 [nprobe.c:4994] WARNING: \
> > > > > > > > > > > > > > > > > The default template will be used 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:27:43 [nprobe.c:4999] Using NetFlow Packet \
> > > > > > > > > > > > > > > > > Payload Len: 1472 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [plugin.c:872] 0 plugin(s) enabled 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:27:43 [nprobe.c:5300] Scanning flow template… …
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [nprobe.c:5340] Scanning \
> > > > > > > > > > > > > > > > > option template... 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:5346] Found TOTAL_FLOWS_EXP [id \
> > > > > > > > > > > > > > > > > 42][4 bytes][total 4 bytes] 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:5346] Found TOTAL_PKTS_EXP [id \
> > > > > > > > > > > > > > > > > 41][4 bytes][total 8 bytes] 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:5374] Each flow is 85 bytes long \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [nprobe.c:5375] The # packets \
> > > > > > > > > > > > > > > > > per flow has been set to 16 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:4371] Using packet capture length 128 \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [nprobe.c:5905] The flows hash \
> > > > > > > > > > > > > > > > > has 131072 buckets 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:5907] Flows older than 120 seconds will \
> > > > > > > > > > > > > > > > > be exported 07/Jan/2014 14:27:43 [nprobe.c:5910] \
> > > > > > > > > > > > > > > > > Flows inactive for at least 30 seconds will be \
> > > > > > > > > > > > > > > > > exported 07/Jan/2014 14:27:43 [nprobe.c:5913] \
> > > > > > > > > > > > > > > > > Expired flows will not be queued for more than 30 \
> > > > > > > > > > > > > > > > > seconds 07/Jan/2014 14:27:43 [nprobe.c:5920] \
> > > > > > > > > > > > > > > > > Exported flows with engineType 0 and engineId 207 \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [nprobe.c:5942] TCP TOS will \
> > > > > > > > > > > > > > > > > be ignored and set to 0. 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:5947] Flows ASs will not be computed \
> > > > > > > > > > > > > > > > > (missing GeoIP support) 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:5960] After 1 flow packets are sent, \
> > > > > > > > > > > > > > > > > we'll delay at least 1 ms 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:5980] Flows will be emitted in NetFlow 9 \
> > > > > > > > > > > > > > > > > format 07/Jan/2014 14:27:43 [nprobe.c:6010] Flow \
> > > > > > > > > > > > > > > > > input interface index is set to 0 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:27:43 [nprobe.c:6016] Flow output interface \
> > > > > > > > > > > > > > > > > index is set to 0 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:6030] Not capturing packet from interface \
> > > > > > > > > > > > > > > > > (collector mode) 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [collect.c:97] Created UDP sockets 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:27:43 [collect.c:156] Flow collector listening \
> > > > > > > > > > > > > > > > > on port 2055 (IPv4/v6) 07/Jan/2014 14:27:43 \
> > > > > > > > > > > > > > > > > [nprobe.c:6137] Starting 1 packet fetch thread(s) \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:43 [engine.c:2980] Starting \
> > > > > > > > > > > > > > > > > bucket dequeue thread
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > and I show this kind of messages which seems good
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:46 [engine.c:2350] Emitting Flow: \
> > > > > > > > > > > > > > > > > [->][tcp] 10.1.70.30:56189 -> 10.10.31.79:13111 [5 \
> > > > > > > > > > > > > > > > > pkt/372 bytes][ifIdx 0->0][duration 0.0 sec] \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:46 [util.c:3517] [ZMQ] \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:46 [engine.c:2372] Emitting Flow: \
> > > > > > > > > > > > > > > > > [<-][tcp] 10.10.31.79:13111 -> 10.1.70.30:56189 [4 \
> > > > > > > > > > > > > > > > > pkt/238 bytes][ifIdx 0->0][0.0 sec] 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:27:46 [util.c:3517] [ZMQ] \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:46 [engine.c:2350] Emitting Flow: \
> > > > > > > > > > > > > > > > > [->][tcp] 10.1.70.30:56188 -> 10.10.31.79:13111 [5 \
> > > > > > > > > > > > > > > > > pkt/372 bytes][ifIdx 0->0][duration 0.0 sec] \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:27:46 [util.c:3517] [ZMQ] \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > The socket is listening on port 5556, so i launch \
> > > > > > > > > > > > > > > > > ntopng like this :
> > > > > > > > > > > > > > > > > ROOT:cacti:/root > ntopng -i tcp://127.0.0.1:5556 \
> > > > > > > > > > > > > > > > > -v 07/Jan/2014 14:37:30 [Ntop.cpp:461] Setting \
> > > > > > > > > > > > > > > > > local networks to \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:37:30 [AddressResolution.cpp:129] \
> > > > > > > > > > > > > > > > > Rule '192.168.1.0'/'24' 07/Jan/2014 14:37:30 \
> > > > > > > > > > > > > > > > > [AddressResolution.cpp:129] Rule '0.0.0.0'/'32' \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:37:30 [AddressResolution.cpp:129] \
> > > > > > > > > > > > > > > > > Rule '224.0.0.0'/'8' 07/Jan/2014 14:37:30 \
> > > > > > > > > > > > > > > > > [AddressResolution.cpp:129] Rule '239.0.0.0'/'8' \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:37:30 [AddressResolution.cpp:129] \
> > > > > > > > > > > > > > > > > Rule '255.255.255.255'/'32' 07/Jan/2014 14:37:30 \
> > > > > > > > > > > > > > > > > [AddressResolution.cpp:129] Rule '127.0.0.0'/'8' \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:37:30 [Ntop.cpp:568] Registered \
> > > > > > > > > > > > > > > > > interface collector@127.0.0.1:5556 [id: 0] \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:37:30 [Utils.cpp:235] User changed \
> > > > > > > > > > > > > > > > > to nobody 07/Jan/2014 14:37:30 [main.cpp:147] PID \
> > > > > > > > > > > > > > > > > stored in file /var/tmp/ntopng.pid 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:37:30 [HTTPserver.cpp:342] HTTP server listening \
> > > > > > > > > > > > > > > > > on port 3000 \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:37:30 [main.cpp:179] Using RRD \
> > > > > > > > > > > > > > > > > version 1.4.7 07/Jan/2014 14:37:30 [main.cpp:188] \
> > > > > > > > > > > > > > > > > Working directory: /var/tmp/ntopng 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:37:30 [main.cpp:190] Scripts/HTML pages \
> > > > > > > > > > > > > > > > > directory: /usr/local/share/ntopng 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:37:30 [Ntop.cpp:165] Welcome to ntopng x86_64 \
> > > > > > > > > > > > > > > > > v.1.1 (r) - (C) 1998-13 ntop.org 07/Jan/2014 \
> > > > > > > > > > > > > > > > > 14:37:30 [Redis.cpp:54] Successfully connected to \
> > > > > > > > > > > > > > > > > Redis 64 bit v.2.8.3 07/Jan/2014 14:37:30 \
> > > > > > > > > > > > > > > > > [PeriodicActivities.cpp:53] Started periodic \
> > > > > > > > > > > > > > > > > activities loop... 07/Jan/2014 14:37:30 \
> > > > > > > > > > > > > > > > > [CollectorInterface.cpp:100] Collecting flows... \
> > > > > > > > > > > > > > > > > 07/Jan/2014 14:37:30 [CollectorInterface.cpp:233] \
> > > > > > > > > > > > > > > > > Flow collection is over. 07/Jan/2014 14:37:30 \
> > > > > > > > > > > > > > > > > [NetworkInterface.cpp:549] Started packet polling \
> > > > > > > > > > > > > > > > > on interface collector@127.0.0.1:5556...
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > But after hour I always have :
> > > > > > > > > > > > > > > > > No packet has been received yet on interface \
> > > > > > > > > > > > > > > > > collector@127.0.0.1:5556. Please wait 6 seconds \
> > > > > > > > > > > > > > > > > until this page reloads.
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > Can you help me ?
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > Thanks
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > _______________________________________________
> > > > > > > > > > > > > > > > Ntop mailing list
> > > > > > > > > > > > > > > > Ntop@listgateway.unipi.it
> > > > > > > > > > > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > _______________________________________________
> > > > > > > > > > > > > > > Ntop mailing list
> > > > > > > > > > > > > > > Ntop@listgateway.unipi.it
> > > > > > > > > > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > --
> > > > > > > > > > > > > > Stephen Clark
> > > > > > > > > > > > > > NetWolves
> > > > > > > > > > > > > > Director of Technology
> > > > > > > > > > > > > > Phone: 813-579-3200
> > > > > > > > > > > > > > Fax: 813-882-0209
> > > > > > > > > > > > > > Email: steve.clark@netwolves.com
> > > > > > > > > > > > > > http://www.netwolves.com
> > > > > > > > > > > > > > _______________________________________________
> > > > > > > > > > > > > > Ntop mailing list
> > > > > > > > > > > > > > Ntop@listgateway.unipi.it
> > > > > > > > > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > > > > > > > > >
> > > > > > > > > > > > > _______________________________________________
> > > > > > > > > > > > > Ntop mailing list
> > > > > > > > > > > > > Ntop@listgateway.unipi.it
> > > > > > > > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > _______________________________________________
> > > > > > > > > > > > Ntop mailing list
> > > > > > > > > > > > Ntop@listgateway.unipi.it
> > > > > > > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > > Stephen Clark
> > > > > > > > > > > NetWolves
> > > > > > > > > > > Director of Technology
> > > > > > > > > > > Phone: 813-579-3200
> > > > > > > > > > > Fax: 813-882-0209
> > > > > > > > > > > Email: steve.clark@netwolves.com
> > > > > > > > > > > http://www.netwolves.com
> > > > > > > > > > > _______________________________________________
> > > > > > > > > > > Ntop mailing list
> > > > > > > > > > > Ntop@listgateway.unipi.it
> > > > > > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > > > > > >
> > > > > > > > > > _______________________________________________
> > > > > > > > > > Ntop mailing list
> > > > > > > > > > Ntop@listgateway.unipi.it
> > > > > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > > > > >
> > > > > > > > > _______________________________________________
> > > > > > > > > Ntop mailing list
> > > > > > > > > Ntop@listgateway.unipi.it
> > > > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > > > >
> > > > > > > > _______________________________________________
> > > > > > > > Ntop mailing list
> > > > > > > > Ntop@listgateway.unipi.it
> > > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > > >
> > > > > > > _______________________________________________
> > > > > > > Ntop mailing list
> > > > > > > Ntop@listgateway.unipi.it
> > > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > > >
> > > > > > _______________________________________________
> > > > > > Ntop mailing list
> > > > > > Ntop@listgateway.unipi.it
> > > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > > >
> > > > > _______________________________________________
> > > > > Ntop mailing list
> > > > > Ntop@listgateway.unipi.it
> > > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > > >
> > > > _______________________________________________
> > > > Ntop mailing list
> > > > Ntop@listgateway.unipi.it
> > > > http://listgateway.unipi.it/mailman/listinfo/ntop
> > >
> > > _______________________________________________
> > > Ntop mailing list
> > > Ntop@listgateway.unipi.it
> > > http://listgateway.unipi.it/mailman/listinfo/ntop
> >
> > _______________________________________________
> > Ntop mailing list
> > Ntop@listgateway.unipi.it
> > http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
[Attachment #5 (unknown)]
<html><head><meta http-equiv="Content-Type" content="text/html \
charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: \
space; -webkit-line-break: after-white-space;">Thanks for reporting the issue and the \
patch. I have realised that the collector interface was without a code that waits the \
interface to be up.<div><br></div><div>The new code is in \
SVN</div><div><br></div><div>Cheers Luca</div><div><br><div><div>On 15 Jan 2014, at \
14:59, Marc Boisis <<a \
href="mailto:marc.boisis@univ-lr.fr">marc.boisis@univ-lr.fr</a>> wrote:</div><br \
class="Apple-interchange-newline"><blockquote type="cite"><meta \
http-equiv="Content-Type" content="text/html charset=windows-1252"><div \
style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;">I’ve found a workaround !!!<div><br></div><div>In the \
file <span style="font-family: Menlo; font-size: 11px;">CollectorInterface.cpp , \
in the function : </span><span style="font-family: Menlo; font-size: \
11px;">startPacketPolling. You first start the polling thread which is doing \
collect_flows. collect_flows need isRunnig to be set to true. But the running \
variable is set to true </span><span style="font-family: Menlo; font-size: \
11px;">NetworkInterface::startPacketPolling();</span></div><div><span \
style="font-family: Menlo; font-size: 11px;"><br></span></div><div><span \
style="font-family: Menlo; font-size: 11px;">It can work if the thread is starting \
slowly.</span></div><div><span style="font-family: Menlo; font-size: \
11px;"><br></span></div><div><span style="font-family: Menlo; font-size: 11px;">So I \
invert the two lines like this: </span></div><div style="margin: 0px; font-size: \
11px; font-family: Menlo;">void CollectorInterface::startPacketPolling() {</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;"> \
NetworkInterface::startPacketPolling();</div><div style="margin: 0px; font-size: \
11px; font-family: Menlo;"> pthread_create(&pollLoop, NULL, packetPollLoop, \
(void*)this);</div><div><span style="font-family: Menlo; font-size: \
11px;">}</span></div><div><span style="font-family: Menlo; font-size: \
11px;"><br></span></div><div><font face="Menlo"><span style="font-size: 11px;">I \
don’t know if there is any side effect but it’s working. What do you think about it \
?</span></font></div><div><font face="Menlo"><span style="font-size: \
11px;"> </span></font></div><div><br></div><div><br></div><div><br><div \
apple-content-edited="true"> <span class="Apple-style-span" style="border-collapse: \
separate; border-spacing: 0px;"><div id="sig" style="line-height: 13px; margin-top: \
6px; margin-right: 0px; margin-bottom: 6px; margin-left: 0px; padding-top: 8px; \
padding-right: 8px; padding-bottom: 8px; padding-left: 8px; border-top-width: 1px; \
border-top-color: rgb(153, 153, 153); border-top-style: dotted; border-bottom-width: \
1px; border-bottom-color: rgb(153, 153, 153); border-bottom-style: dotted; \
font-family: 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 11px; color: \
rgb(51, 51, 51); "><img \
src="data:image/gif;base64,R0lGODlhMAAwAOYAAAAAAAAAQAAAaAAAdAAAegAVfgAigwAthgAudgA1iQA \
8jAA+fgBAfwBBjgBE%20kABGggBMlABRlgFTmQNJhAVYnwcHDQkGCwoIDAtLhQtWmQ8NEBJXmRMSFRNNhhRYmx \
VboRYVGBpP%20iBsaHBxQiR1bnR5foyFcnSNeoCQkJSRUiydblidgnydhoilWjSlemixkpS1Yji5gmy5nqC5or \
DBn%20qDJjnjJpqzNmozlwszppoztnoEBAQUNto0dwp0hwpU1MTVB0plR4ql5/r1+BsGBfYGOCr2dnZ2eF%20s \
miHs2yKtXGMtXGNuHNzdHaRunmTvHp5en+Yv4Kav4KawIODg4yMjIyhxI+PkJCkxZKmyJOSk5Wo%20x5apyZqt \
zJubnJ6y0aK00aSkpKa41aq61ayrrK+vsLLC3LOztLjH4LzK4cHO5MLCwsPR58XS6MnW%2068vLy8/b79HR0dX \
g89rk9Nzc3N7p+OTk5Obu++fw/uvr6+vz//Pz8/b8//7+/gAAAAAAAAAAACH5%20BAkAAH0ALAAAAAAwADAAAA \
f/gH2Cg4ISJCaIiYqLjI2JLykAkpKEgi83NjIsjpydjw8AVExZAIQm%20NjYvnqudNAhTfHVzpZY4qqy4jS8LA \
Hh8s4IkOJu5xYovDABTk4I3t8bQNrx8eGalLzbQ2qe8empU%20pc7b0DKgpJIRNifjxjIYAHB8bgAeM+zGLx0A \
O2BMACTP7rGykczXLBPrBOKiAUoWGQAKi70YAcAI%20k2URczEEUIePtYy4CALQw6cLRJCrXkwAAAYOmJMoWyX \
LQoRUTE/SAPCJBfNmo41qqvX0uWijG39D%20iT6iSISPnqRKTbx4F/QJVKUbzSCNymgqADV81FwlqpKlGXBcF+ \
UD0CXsWJ8v/0IAmMPHalpFMlaO%20UWPl7U0a79zo8Xf3kb4fXfD4jUlDH915hRFNVHYustRIkyxYftECgAgUI \
Dhs7nyBg+nRAEqfjsw5%20tWnRrEm/hnYooETZqxuRICHB0CETuyEkMKSIt4ffJiREgODhEW7YuiXcuBHBQ4Td \
Dno4cQABAgkP%203XNsMLS8hokbGyBkAPic04oDYbgYgFDDAfc2caoQMJFAgQkCbAgxgH8DfIEFGiY00F1rqkH \
XiAFh%20eDGAFHGEQYALaGihRRV3JFFFHkqgkQcQR9CxxRZXiFEEG2+QQAEMruX24BdVCMADGnQQ0IAde6gg%2 \
0hhJhlBEDAWKk+IUcVVxRBZkXWsiRRnIwNkhCQmpBiMYAZcjRRgExsPFFimJ8UUYVNZwRxRdiPPkF%20F2Jw0U \
YTEXwQJQehIeQIBDy8GcQaUBxgghQ8NOHEGzwgEccSSQyxhA9sSFHEEU3oUEYZEZQQZWh9%202MlIcAk4oEB/GUjAnQIKHECqqfY18KkCqTbQXwStaYCpppsictwhuwG326686pqrrsC1RksfgQAA%20Ow==" \
width="48" height="48" style="float: left; margin-top: 4px; margin-right: 4px; \
margin-bottom: 4px; margin-left: 4px; "><strong style="color: rgb(51, 51, 51); ">Marc \
Boisis-Delavaud</strong><br>Direction du Système d'Information<br>Université de La \
Rochelle<br><a href="mailto:marc.boisis@univ-lr.fr" style="color: rgb(153, 153, 153); \
text-decoration: none; border-bottom-width: 1px; border-bottom-color: rgb(153, 153, \
153); border-bottom-style: dotted; ">marc.boisis@univ-lr.fr</a><span \
class="Apple-converted-space"> </span>| 05 46 45 82 14</div></span> </div>
<br><div><div>Le 15 janv. 2014 à 11:50, Marc Boisis <<a \
href="mailto:marc.boisis@univ-lr.fr">marc.boisis@univ-lr.fr</a>> a écrit \
:</div><br class="Apple-interchange-newline"><blockquote type="cite"><meta \
http-equiv="Content-Type" content="text/html charset=windows-1252"><div \
style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;">It’s very strange...<div><br></div><div>Yesteday I success to \
have ntopng working with these exact commands:</div><div><br></div><div><div>nprobe \
-b 1 --collector-port 2055 --zmq "<a href="tcp://*:5556">tcp://*:5556</a>" -n none \
--disable-cache -V 5 --dont-drop-privileges -i none</div><div>ntopng -i "<a \
href="tcp://127.0.0.1:5556">tcp://127.0.0.1:5556</a>" -s --verbose -m \
"192.168.1.0/24 »</div></div><div><br></div><div>Ok it worked, so I \
decided to stop the process to set off verbose and since …. ntopng refuse to work \
even with or without verbose</div><div>It only show this messages :</div><div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:02 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:03 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:04 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:05 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:06 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:07 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:08 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:09 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:10 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:11 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:12 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:13 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:14 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">15/Jan/2014 10:33:15 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div></div><div><br></div><div><br></div><div><br><div \
apple-content-edited="true"> <span class="Apple-style-span" style="border-collapse: \
separate; border-spacing: 0px;"><div id="sig" style="line-height: 13px; margin-top: \
6px; margin-right: 0px; margin-bottom: 6px; margin-left: 0px; padding-top: 8px; \
padding-right: 8px; padding-bottom: 8px; padding-left: 8px; border-top-width: 1px; \
border-top-color: rgb(153, 153, 153); border-top-style: dotted; border-bottom-width: \
1px; border-bottom-color: rgb(153, 153, 153); border-bottom-style: dotted; \
font-family: 'Lucida Grande', Verdana, Arial, sans-serif; font-size: 11px; color: \
rgb(51, 51, 51); "><img \
src="data:image/gif;base64,R0lGODlhMAAwAOYAAAAAAAAAQAAAaAAAdAAAegAVfgAigwAthgAudgA1iQA \
8jAA+fgBAfwBBjgBE%20kABGggBMlABRlgFTmQNJhAVYnwcHDQkGCwoIDAtLhQtWmQ8NEBJXmRMSFRNNhhRYmx \
VboRYVGBpP%20iBsaHBxQiR1bnR5foyFcnSNeoCQkJSRUiydblidgnydhoilWjSlemixkpS1Yji5gmy5nqC5or \
DBn%20qDJjnjJpqzNmozlwszppoztnoEBAQUNto0dwp0hwpU1MTVB0plR4ql5/r1+BsGBfYGOCr2dnZ2eF%20s \
miHs2yKtXGMtXGNuHNzdHaRunmTvHp5en+Yv4Kav4KawIODg4yMjIyhxI+PkJCkxZKmyJOSk5Wo%20x5apyZqt \
zJubnJ6y0aK00aSkpKa41aq61ayrrK+vsLLC3LOztLjH4LzK4cHO5MLCwsPR58XS6MnW%2068vLy8/b79HR0dX \
g89rk9Nzc3N7p+OTk5Obu++fw/uvr6+vz//Pz8/b8//7+/gAAAAAAAAAAACH5%20BAkAAH0ALAAAAAAwADAAAA \
f/gH2Cg4ISJCaIiYqLjI2JLykAkpKEgi83NjIsjpydjw8AVExZAIQm%20NjYvnqudNAhTfHVzpZY4qqy4jS8LA \
Hh8s4IkOJu5xYovDABTk4I3t8bQNrx8eGalLzbQ2qe8empU%20pc7b0DKgpJIRNifjxjIYAHB8bgAeM+zGLx0A \
O2BMACTP7rGykczXLBPrBOKiAUoWGQAKi70YAcAI%20k2URczEEUIePtYy4CALQw6cLRJCrXkwAAAYOmJMoWyX \
LQoRUTE/SAPCJBfNmo41qqvX0uWijG39D%20iT6iSISPnqRKTbx4F/QJVKUbzSCNymgqADV81FwlqpKlGXBcF+ \
UD0CXsWJ8v/0IAmMPHalpFMlaO%20UWPl7U0a79zo8Xf3kb4fXfD4jUlDH915hRFNVHYustRIkyxYftECgAgUI \
Dhs7nyBg+nRAEqfjsw5%20tWnRrEm/hnYooETZqxuRICHB0CETuyEkMKSIt4ffJiREgODhEW7YuiXcuBHBQ4Td \
Dno4cQABAgkP%203XNsMLS8hokbGyBkAPic04oDYbgYgFDDAfc2caoQMJFAgQkCbAgxgH8DfIEFGiY00F1rqkH \
XiAFh%20eDGAFHGEQYALaGihRRV3JFFFHkqgkQcQR9CxxRZXiFEEG2+QQAEMruX24BdVCMADGnQQ0IAde6gg%2 \
0hhJhlBEDAWKk+IUcVVxRBZkXWsiRRnIwNkhCQmpBiMYAZcjRRgExsPFFimJ8UUYVNZwRxRdiPPkF%20F2Jw0U \
YTEXwQJQehIeQIBDy8GcQaUBxgghQ8NOHEGzwgEccSSQyxhA9sSFHEEU3oUEYZEZQQZWh9%202MlIcAk4oEB/GUjAnQIKHECqqfY18KkCqTbQXwStaYCpppsictwhuwG326686pqrrsC1RksfgQAA%20Ow==" \
width="48" height="48" style="float: left; margin-top: 4px; margin-right: 4px; \
margin-bottom: 4px; margin-left: 4px; "><strong style="color: rgb(51, 51, 51); ">Marc \
Boisis-Delavaud</strong><br>Direction du Système d'Information<br>Université de La \
Rochelle<br><a href="mailto:marc.boisis@univ-lr.fr" style="color: rgb(153, 153, 153); \
text-decoration: none; border-bottom-width: 1px; border-bottom-color: rgb(153, 153, \
153); border-bottom-style: dotted; ">marc.boisis@univ-lr.fr</a><span \
class="Apple-converted-space"> </span>| 05 46 45 82 14</div></span> </div>
<br><div><div>Le 15 janv. 2014 à 09:47, Luca Deri <<a \
href="mailto:deri@ntop.org">deri@ntop.org</a>> a écrit :</div><br \
class="Apple-interchange-newline"><blockquote type="cite"><meta \
http-equiv="Content-Type" content="text/html charset=windows-1252"><div \
style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;">Marc<div>I have just tested again</div><div><br></div><div>1. \
stared nprobe as follow</div><div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;">nprobe --zmq "<a \
href="tcp://*:5556”">tcp://*:5556”</a> </div><div style="margin: 0px; font-size: \
11px; font-family: Menlo;"><br></div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;">then </div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;">2. I have started ntopng (latest svn code)</div><div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">ntopng -i <a \
href="tcp://127.0.0.1:5556">tcp://127.0.0.1:5556</a> \
-v</div></div><div><br></div><div style="margin: 0px; font-size: 11px; font-family: \
Menlo;">And I see flows coming</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><br></div><div style="margin: 0px; font-size: 11px; font-family: \
Menlo;"><div style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] \
[8]=[54.247.120.211]</div><div style="margin: 0px;">15/Jan/2014 09:46:36 \
[CollectorInterface.cpp:145] [12]=[192.168.1.92]</div><div style="margin: \
0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [15]=[0.0.0.0]</div><div \
style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled \
ZMQ field 15</div><div style="margin: 0px;">15/Jan/2014 09:46:36 \
[CollectorInterface.cpp:145] [10]=[65535]</div><div style="margin: 0px;">15/Jan/2014 \
09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 10</div><div \
style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] \
[14]=[65535]</div><div style="margin: 0px;">15/Jan/2014 09:46:36 \
[CollectorInterface.cpp:208] Not handled ZMQ field 14</div><div style="margin: \
0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [2]=[1]</div><div \
style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] \
[1]=[598]</div><div style="margin: 0px;">15/Jan/2014 09:46:36 \
[CollectorInterface.cpp:145] [22]=[1389775594]</div><div style="margin: \
0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [21]=[1389775594]</div><div \
style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] \
[7]=[80]</div><div style="margin: 0px;">15/Jan/2014 09:46:36 \
[CollectorInterface.cpp:145] [11]=[50292]</div><div style="margin: 0px;">15/Jan/2014 \
09:46:36 [CollectorInterface.cpp:145] [6]=[24]</div><div style="margin: \
0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [4]=[6]</div><div \
style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] \
[5]=[0]</div><div style="margin: 0px;">15/Jan/2014 09:46:36 \
[CollectorInterface.cpp:208] Not handled ZMQ field 5</div><div style="margin: \
0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [16]=[16509]</div><div \
style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled \
ZMQ field 16</div><div style="margin: 0px;">15/Jan/2014 09:46:36 \
[CollectorInterface.cpp:145] [17]=[0]</div><div style="margin: 0px;">15/Jan/2014 \
09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 17</div><div \
style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] \
[9]=[0]</div><div style="margin: 0px;">15/Jan/2014 09:46:36 \
[CollectorInterface.cpp:208] Not handled ZMQ field 9</div><div style="margin: \
0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:145] [13]=[0]</div><div \
style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:208] Not handled \
ZMQ field 13</div><div style="margin: 0px;">15/Jan/2014 09:46:36 \
[CollectorInterface.cpp:145] [42]=[103]</div><div style="margin: 0px;">15/Jan/2014 \
09:46:36 [CollectorInterface.cpp:208] Not handled ZMQ field 42</div><div \
style="margin: 0px;">15/Jan/2014 09:46:36 [CollectorInterface.cpp:229] [202] \
{"8":"54.247.120.211”,</div><div style="margin: 0px;"><br></div><div style="margin: \
0px;">Regards Luca</div><div style="margin: 0px;"><br></div></div><div><div>On 13 Jan \
2014, at 15:59, Marc Boisis <<a \
href="mailto:marc.boisis@univ-lr.fr">marc.boisis@univ-lr.fr</a>> wrote:</div><br \
class="Apple-interchange-newline"><blockquote type="cite"><meta \
http-equiv="Content-Type" content="text/html charset=windows-1252"><div \
style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;">I’ve listened with tcpdump/wireshark on 127.0.0.1 port 5556 and I \
see the flows in the communication. So I think ntopng have a problem to read \
them.<div><br></div><div><div style="margin: 0px; font-size: 11px; font-family: \
Menlo;">15:58:46.545957 IP (tos 0x0, ttl 64, id 4527, offset 0, flags [DF], proto TCP \
(6), length 7066) 127.0.0.1.5556 > 127.0.0.1.38103: P, cksum 0x198f (incorrect \
(-> 0xf498), 92:7106(7014) ack 99 win 256 <nop,nop,timestamp 217252798 \
217252021></div><div style="margin: 0px; font-size: 11px; font-family: \
Menlo;"><span class="Apple-tab-span" style="white-space:pre"> </span>0x0000: \
4500 1b9a 11af 4000 4006 0fad 7f00 0001 E.....@.@.......</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;"><span \
class="Apple-tab-span" style="white-space:pre"> </span>0x0010: 7f00 0001 15b4 \
94d7 1196 117a 11ad 69c1 ...........z..i.</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0020: 8018 0100 198f 0000 0101 080a 0cf3 \
03be ................</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0030: 0cf3 00b5 0128 666c 6f77 0000 0000 \
e140 .....(flow.....@</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0040: cc98 8e47 4c17 0800 0000 0000 0000 \
0100 ...GL...........</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0050: 0000 0000 0000 0000 0000 bd00 0000 \
00bd ................</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0060: 7b22 3822 3a22 3130 2e31 302e 3331 \
2e31 {"8":"10.10.31.1</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0070: 3030 222c 2231 3222 3a22 3130 2e31 \
2e39 00","12":"10.1.9</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0080: 302e 3137 222c 2231 3522 3a22 302e \
302e 0.17","15":"0.0.</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0090: 302e 3022 2c22 3130 223a 302c 2231 \
3422 0.0","10":0,"14"</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x00a0: 3a30 2c22 3222 3a35 2c22 3122 3a35 \
3038 :0,"2":5,"1":508</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x00b0: 2c22 3232 223a 3133 3839 3632 3530 \
3536 ,"22":1389625056</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x00c0: 2c22 3231 223a 3133 3839 3632 3530 \
3936 ,"21":1389625096</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x00d0: 2c22 3722 3a31 3335 2c22 3131 223a \
3431 ,"7":135,"11":41</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x00e0: 3231 2c22 3622 3a30 2c22 3422 3a36 \
2c22 21,"6":0,"4":6,"</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x00f0: 3522 3a30 2c22 3136 223a 302c 2231 \
3722 5":0,"16":0,"17"</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0100: 3a30 2c22 3922 3a30 2c22 3133 223a \
302c :0,"9":0,"13":0,</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0110: 2234 3222 3a31 3933 3038 3631 7d01 \
2866 "42":1930861}.(f</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0120: 6c6f 7700 0000 00e1 40cc 988e 474c \
1708 low.....@...GL..</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0130: 0000 0000 0000 0001 0000 0000 0000 \
0000 ................</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0140: 0000 00bd 0000 0000 bd7b 2238 223a \
2231 .........{"8":"1</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0150: 302e 312e 3930 2e31 3722 2c22 3132 \
223a 0.1.90.17","12":</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0160: 2231 302e 3130 2e33 312e 3130 3022 \
2c22 "10.10.31.100","</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0170: 3135 223a 2230 2e30 2e30 2e30 222c \
2231 15":"0.0.0.0","1</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0180: 3022 3a30 2c22 3134 223a 302c 2232 \
223a 0":0,"14":0,"2":</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0190: 372c 2231 223a 3531 362c 2232 3222 \
3a31 7,"1":516,"22":1</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x01a0: 3338 3936 3235 3035 362c 2232 3122 \
3a31 389625056,"21":1</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x01b0: 3338 3936 3235 3039 362c 2237 223a \
3431 389625096,"7":41</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x01c0: 3231 2c22 3131 223a 3133 352c 2236 \
223a 21,"11":135,"6":</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x01d0: 302c 2234 223a 362c 2235 223a 302c \
2231 0,"4":6,"5":0,"1</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x01e0: 3622 3a30 2c22 3137 223a 302c 2239 \
223a 6":0,"17":0,"9":</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x01f0: 302c 2231 3322 3a30 2c22 3432 223a \
3139 0,"13":0,"42":19</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0200: 3330 3836 327d 0128 666c 6f77 0000 \
0000 30862}.(flow....</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0210: e140 cc98 8e47 4c17 0800 0000 0000 \
0000 .@...GL.........</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;"><span class="Apple-tab-span" \
style="white-space:pre"> </span>0x0220: 0100 0000 0000 0000 0000 0000 c200 \
0000 ................</div><div><br></div><div><br></div><div><br></div><div><br><div \
apple-content-edited="true"> <span class="Apple-style-span" style="border-collapse: \
separate; border-spacing: 0px;"><div id="sig" style="line-height: 13px; margin: 6px \
0px; padding: 8px; border-top-width: 1px; border-top-color: rgb(153, 153, 153); \
border-top-style: dotted; border-bottom-width: 1px; border-bottom-color: rgb(153, \
153, 153); border-bottom-style: dotted; font-family: 'Lucida Grande', Verdana, Arial, \
sans-serif; font-size: 11px; color: rgb(51, 51, 51); position: static; z-index: \
auto;"><img src="data:image/gif;base64,R0lGODlhMAAwAOYAAAAAAAAAQAAAaAAAdAAAegAVfgAigwA \
thgAudgA1iQA8jAA+fgBAfwBBjgBE%20kABGggBMlABRlgFTmQNJhAVYnwcHDQkGCwoIDAtLhQtWmQ8NEBJXmR \
MSFRNNhhRYmxVboRYVGBpP%20iBsaHBxQiR1bnR5foyFcnSNeoCQkJSRUiydblidgnydhoilWjSlemixkpS1Yj \
i5gmy5nqC5orDBn%20qDJjnjJpqzNmozlwszppoztnoEBAQUNto0dwp0hwpU1MTVB0plR4ql5/r1+BsGBfYGOC \
r2dnZ2eF%20smiHs2yKtXGMtXGNuHNzdHaRunmTvHp5en+Yv4Kav4KawIODg4yMjIyhxI+PkJCkxZKmyJOSk5W \
o%20x5apyZqtzJubnJ6y0aK00aSkpKa41aq61ayrrK+vsLLC3LOztLjH4LzK4cHO5MLCwsPR58XS6MnW%2068v \
Ly8/b79HR0dXg89rk9Nzc3N7p+OTk5Obu++fw/uvr6+vz//Pz8/b8//7+/gAAAAAAAAAAACH5%20BAkAAH0ALA \
AAAAAwADAAAAf/gH2Cg4ISJCaIiYqLjI2JLykAkpKEgi83NjIsjpydjw8AVExZAIQm%20NjYvnqudNAhTfHVzp \
ZY4qqy4jS8LAHh8s4IkOJu5xYovDABTk4I3t8bQNrx8eGalLzbQ2qe8empU%20pc7b0DKgpJIRNifjxjIYAHB8 \
bgAeM+zGLx0AO2BMACTP7rGykczXLBPrBOKiAUoWGQAKi70YAcAI%20k2URczEEUIePtYy4CALQw6cLRJCrXkw \
AAAYOmJMoWyXLQoRUTE/SAPCJBfNmo41qqvX0uWijG39D%20iT6iSISPnqRKTbx4F/QJVKUbzSCNymgqADV81F \
wlqpKlGXBcF+UD0CXsWJ8v/0IAmMPHalpFMlaO%20UWPl7U0a79zo8Xf3kb4fXfD4jUlDH915hRFNVHYustRIk \
yxYftECgAgUIDhs7nyBg+nRAEqfjsw5%20tWnRrEm/hnYooETZqxuRICHB0CETuyEkMKSIt4ffJiREgODhEW7Y \
uiXcuBHBQ4TdDno4cQABAgkP%203XNsMLS8hokbGyBkAPic04oDYbgYgFDDAfc2caoQMJFAgQkCbAgxgH8DfIE \
FGiY00F1rqkHXiAFh%20eDGAFHGEQYALaGihRRV3JFFFHkqgkQcQR9CxxRZXiFEEG2+QQAEMruX24BdVCMADGn \
QQ0IAde6gg%20hhJhlBEDAWKk+IUcVVxRBZkXWsiRRnIwNkhCQmpBiMYAZcjRRgExsPFFimJ8UUYVNZwRxRdiP \
PkF%20F2Jw0UYTEXwQJQehIeQIBDy8GcQaUBxgghQ8NOHEGzwgEccSSQyxhA9sSFHEEU3oUEYZEZQQZWh9%202 \
MlIcAk4oEB/GUjAnQIKHECqqfY18KkCqTbQXwStaYCpppsictwhuwG326686pqrrsC1RksfgQAA%20Ow==" \
width="48" height="48" style="float: left; margin-top: 4px; margin-right: 4px; \
margin-bottom: 4px; margin-left: 4px; "><strong style="color: rgb(51, 51, 51); ">Marc \
Boisis-Delavaud</strong><br>Direction du Système d'Information<br>Université de La \
Rochelle<br><a href="mailto:marc.boisis@univ-lr.fr" style="color: rgb(153, 153, 153); \
text-decoration: none; border-bottom-width: 1px; border-bottom-color: rgb(153, 153, \
</div>
<br><div><div>Le 13 janv. 2014 à 15:19, Luca Deri <<a \
href="mailto:deri@ntop.org">deri@ntop.org</a>> a écrit :</div><br \
class="Apple-interchange-newline"><blockquote type="cite"><meta \
http-equiv="Content-Type" content="text/html charset=windows-1252"><div \
style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;">yes you can write a simple app/script that does it, but I would \
encourage you to rather debug ntopng and see why it does not receive \
flows<div><br></div><div>Luca<br><div><div>On 13 Jan 2014, at 15:16, Marc Boisis \
<<a href="mailto:marc.boisis@univ-lr.fr">marc.boisis@univ-lr.fr</a>> \
wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><meta \
http-equiv="Content-Type" content="text/html charset=windows-1252"><div \
style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;"><div>I really don’t know</div><div><br></div><div><div \
style="margin: 0px;">nprobe output is like this :</div><div style="margin: 0px;"><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 12:10:01 \
[util.c:3517] [ZMQ] {"8":"10.10.31.79","12":"10.1.90.5","15":"0.0.0.0","10":0,"14":0," \
2":4,"1":237,"22":1389352165,"21":1389352171,"7":13111,"11":50478,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393287}</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 12:10:01 \
[util.c:3517] [ZMQ] {"8":"10.1.90.5","12":"10.10.31.79","15":"0.0.0.0","10":0,"14":0," \
2":5,"1":361,"22":1389352165,"21":1389352171,"7":50478,"11":13111,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393288}</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 12:10:01 \
[util.c:3517] [ZMQ] {"8":"10.10.31.79","12":"10.1.31.77","15":"0.0.0.0","10":0,"14":0, \
"2":4,"1":238,"22":1389352165,"21":1389352171,"7":13111,"11":60337,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393289}</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 12:10:01 \
[util.c:3517] [ZMQ] {"8":"10.1.31.77","12":"10.10.31.79","15":"0.0.0.0","10":0,"14":0, \
"2":5,"1":341,"22":1389352165,"21":1389352171,"7":60337,"11":13111,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393290}</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 12:10:01 \
[util.c:3517] [ZMQ] {"8":"10.10.31.79","12":"10.1.70.27","15":"0.0.0.0","10":0,"14":0, \
"2":4,"1":238,"22":1389352165,"21":1389352171,"7":13111,"11":65102,"6":0,"4":6,"5":0,"16":0,"17":0,"9":0,"13":0,"42":393291}</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;"><br></div><div \
style="margin: 0px;"><div style="font-size: 11px; font-family: Menlo; margin: \
0px;">10/Jan/2014 12:10:01 [nprobe.c:2050] Flow export stats: [0 bytes/0 pkts][0 \
flows/0 pkts sent]</div><div style="font-size: 11px; font-family: Menlo; margin: \
0px;">10/Jan/2014 12:10:01 [nprobe.c:2057] Flow collection: [collected pkts: \
13110][processed flows: 393300]</div><div style="font-size: 11px; font-family: Menlo; \
margin: 0px;">10/Jan/2014 12:10:01 [nprobe.c:2060] Flow drop stats: [0 bytes/0 \
pkts][0 flows]</div><div style="font-size: 11px; font-family: Menlo; margin: \
0px;">10/Jan/2014 12:10:01 [nprobe.c:2065] Total flow stats: [0 bytes/0 pkts][0 \
flows/0 pkts sent]</div><div style="font-size: 11px; font-family: Menlo; margin: \
0px;"><br></div><div style="font-size: 11px; font-family: Menlo; margin: \
0px;"><br></div><div style="margin: 0px;">is it possible to listen the zmq socket \
traffic ?</div><div><br></div></div></div></div><br><div apple-content-edited="true"> \
<span class="Apple-style-span" style="border-collapse: separate; border-spacing: \
0px;"><div id="sig" style="line-height: 13px; margin-top: 6px; margin-right: 0px; \
margin-bottom: 6px; margin-left: 0px; padding-top: 8px; padding-right: 8px; \
padding-bottom: 8px; padding-left: 8px; border-top-width: 1px; border-top-color: \
rgb(153, 153, 153); border-top-style: dotted; border-bottom-width: 1px; \
border-bottom-color: rgb(153, 153, 153); border-bottom-style: dotted; font-family: \
'Lucida Grande', Verdana, Arial, sans-serif; font-size: 11px; color: rgb(51, 51, 51); \
"><img src="data:image/gif;base64,R0lGODlhMAAwAOYAAAAAAAAAQAAAaAAAdAAAegAVfgAigwAthgAu \
dgA1iQA8jAA+fgBAfwBBjgBE%20kABGggBMlABRlgFTmQNJhAVYnwcHDQkGCwoIDAtLhQtWmQ8NEBJXmRMSFRN \
NhhRYmxVboRYVGBpP%20iBsaHBxQiR1bnR5foyFcnSNeoCQkJSRUiydblidgnydhoilWjSlemixkpS1Yji5gmy \
5nqC5orDBn%20qDJjnjJpqzNmozlwszppoztnoEBAQUNto0dwp0hwpU1MTVB0plR4ql5/r1+BsGBfYGOCr2dnZ \
2eF%20smiHs2yKtXGMtXGNuHNzdHaRunmTvHp5en+Yv4Kav4KawIODg4yMjIyhxI+PkJCkxZKmyJOSk5Wo%20x \
5apyZqtzJubnJ6y0aK00aSkpKa41aq61ayrrK+vsLLC3LOztLjH4LzK4cHO5MLCwsPR58XS6MnW%2068vLy8/b \
79HR0dXg89rk9Nzc3N7p+OTk5Obu++fw/uvr6+vz//Pz8/b8//7+/gAAAAAAAAAAACH5%20BAkAAH0ALAAAAAA \
wADAAAAf/gH2Cg4ISJCaIiYqLjI2JLykAkpKEgi83NjIsjpydjw8AVExZAIQm%20NjYvnqudNAhTfHVzpZY4qq \
y4jS8LAHh8s4IkOJu5xYovDABTk4I3t8bQNrx8eGalLzbQ2qe8empU%20pc7b0DKgpJIRNifjxjIYAHB8bgAeM \
+zGLx0AO2BMACTP7rGykczXLBPrBOKiAUoWGQAKi70YAcAI%20k2URczEEUIePtYy4CALQw6cLRJCrXkwAAAYO \
mJMoWyXLQoRUTE/SAPCJBfNmo41qqvX0uWijG39D%20iT6iSISPnqRKTbx4F/QJVKUbzSCNymgqADV81FwlqpK \
lGXBcF+UD0CXsWJ8v/0IAmMPHalpFMlaO%20UWPl7U0a79zo8Xf3kb4fXfD4jUlDH915hRFNVHYustRIkyxYft \
ECgAgUIDhs7nyBg+nRAEqfjsw5%20tWnRrEm/hnYooETZqxuRICHB0CETuyEkMKSIt4ffJiREgODhEW7YuiXcu \
BHBQ4TdDno4cQABAgkP%203XNsMLS8hokbGyBkAPic04oDYbgYgFDDAfc2caoQMJFAgQkCbAgxgH8DfIEFGiY0 \
0F1rqkHXiAFh%20eDGAFHGEQYALaGihRRV3JFFFHkqgkQcQR9CxxRZXiFEEG2+QQAEMruX24BdVCMADGnQQ0IA \
de6gg%20hhJhlBEDAWKk+IUcVVxRBZkXWsiRRnIwNkhCQmpBiMYAZcjRRgExsPFFimJ8UUYVNZwRxRdiPPkF%2 \
0F2Jw0UYTEXwQJQehIeQIBDy8GcQaUBxgghQ8NOHEGzwgEccSSQyxhA9sSFHEEU3oUEYZEZQQZWh9%202MlIcAk4oEB/GUjAnQIKHECqqfY18KkCqTbQXwStaYCpppsictwhuwG326686pqrrsC1RksfgQAA%20Ow==" \
width="48" height="48" style="float: left; margin-top: 4px; margin-right: 4px; \
margin-bottom: 4px; margin-left: 4px; "><strong style="color: rgb(51, 51, 51); ">Marc \
Boisis-Delavaud</strong><br>Direction du Système d'Information<br>Université de La \
Rochelle<br><a href="mailto:marc.boisis@univ-lr.fr" style="color: rgb(153, 153, 153); \
text-decoration: none; border-bottom-width: 1px; border-bottom-color: rgb(153, 153, \
153); border-bottom-style: dotted; ">marc.boisis@univ-lr.fr</a><span \
class="Apple-converted-space"> </span>| 05 46 45 82 14</div></span> </div>
<br><div><div>Le 13 janv. 2014 à 14:56, Luca Deri <<a \
href="mailto:deri@ntop.org">deri@ntop.org</a>> a écrit :</div><br \
class="Apple-interchange-newline"><blockquote type="cite"><div style="font-family: \
Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: \
normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: \
start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; \
word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div><br \
class="Apple-interchange-newline">On 13 Jan 2014, at 13:54, Marc Boisis <<a \
href="mailto:marc.boisis@univ-lr.fr">marc.boisis@univ-lr.fr</a>> wrote:</div><br \
class="Apple-interchange-newline"><blockquote type="cite"><div style="word-wrap: \
break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;"><div>I’ve upgraded ntopng with the latest SVN version and the \
result is différent but no better !</div><div><br></div><div>The message <span \
style="font-family: Menlo; font-size: 11px;">Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua<span \
class="Apple-converted-space"> </span></span>is being repeated time and time \
again.</div></div></blockquote>this is ok</div><div style="font-family: Helvetica; \
font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; \
letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; \
text-indent: 0px; text-transform: none; white-space: normal; widows: auto; \
word-spacing: 0px; -webkit-text-stroke-width: 0px;"><br></div><div \
style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: \
normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: \
auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; \
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">I suspect that no \
flows are received as otherwise you should have seen something on the screen. Is \
nprobe sending flows towards ntopng?</div><div style="font-family: Helvetica; \
font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; \
letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; \
text-indent: 0px; text-transform: none; white-space: normal; widows: auto; \
word-spacing: 0px; -webkit-text-stroke-width: 0px;"><br></div><div \
style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: \
normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: \
auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; \
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Luca</div><div \
style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: \
normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: \
auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; \
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><blockquote \
type="cite"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; \
-webkit-line-break: after-white-space;"><div><br></div><div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">> ntopng -i<span \
class="Apple-converted-space"> </span><a \
href="tcp://127.0.0.1:5556">tcp://127.0.0.1:5556</a><span \
class="Apple-converted-space"> </span>-s -v</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 [Ntop.cpp:468] Setting \
local networks to 192.168.1.0/24,0.0.0.0/32,224.0.0.0/8,239.0.0.0/8,255.255.255.255/32,127.0.0.0/8</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[AddressResolution.cpp:131] Rule '192.168.1.0'/'24'</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[AddressResolution.cpp:131] Rule '0.0.0.0'/'32'</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[AddressResolution.cpp:131] Rule '224.0.0.0'/'8'</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[AddressResolution.cpp:131] Rule '239.0.0.0'/'8'</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[AddressResolution.cpp:131] Rule '255.255.255.255'/'32'</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[AddressResolution.cpp:131] Rule '127.0.0.0'/'8'</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 [Ntop.cpp:575] Registered \
interface<span class="Apple-converted-space"> </span><a \
href="mailto:collector@127.0.0.1">collector@127.0.0.1</a>:5556 [id: 0]</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[main.cpp:149] PID stored in file /var/tmp/ntopng.pid</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 [HTTPserver.cpp:363] HTTP \
server listening on port 3000 \
[/usr/local/share/ntopng/httpdocs][/usr/local/share/ntopng/scripts]</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[main.cpp:183] Using RRD version 1.3.4</div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;">13/Jan/2014 08:42:57 [main.cpp:192] Working directory: \
/var/tmp/ntopng</div><div style="margin: 0px; font-size: 11px; font-family: \
Menlo;">13/Jan/2014 08:42:57 [main.cpp:194] Scripts/HTML pages directory: \
/usr/local/share/ntopng</div><div style="margin: 0px; font-size: 11px; font-family: \
Menlo;">13/Jan/2014 08:42:57 [Ntop.cpp:164] Welcome to ntopng x86_64 v.1.1.1 (r7173) \
- (C) 1998-13<span class="Apple-converted-space"> </span><a \
href="http://ntop.org/">ntop.org</a></div><div style="margin: 0px; font-size: 11px; \
font-family: Menlo;">13/Jan/2014 08:42:57 [Redis.cpp:47] Successfully connected to \
Redis 127.0.0.1:6379</div><div style="margin: 0px; font-size: 11px; font-family: \
Menlo;">13/Jan/2014 08:42:57 [PeriodicActivities.cpp:53] Started periodic activities \
loop...</div><div style="margin: 0px; font-size: 11px; font-family: \
Menlo;">13/Jan/2014 08:42:57 [PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[CollectorInterface.cpp:100] Collecting flows...</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 \
[CollectorInterface.cpp:233] Flow collection is over.</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:57 [NetworkInterface.cpp:636] \
Started packet polling on interface<span \
class="Apple-converted-space"> </span><a \
href="mailto:collector@127.0.0.1">collector@127.0.0.1</a>:5556...</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:58 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:42:59 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:00 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/minute.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:00 [Lua.cpp:1691] \
[minute.lua] Processing interface collector_127.0.0.1_5556</div><div style="margin: \
0px; font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:00 [Lua.cpp:1691] \
[minute.lua] Creating \
/var/tmp/ntopng/collector_127.0.0.1_5556/top_talkers/2014/01/13/08/43.json</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:00 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:01 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:02 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:03 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:04 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:05 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">13/Jan/2014 08:43:06 \
[PeriodicActivities.cpp:91] Starting script \
/usr/local/share/ntopng/scripts/callbacks/second.lua</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;"><br></div></div><div><br></div><br><div \
apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: \
separate; border-spacing: 0px;"><div id="sig" style="line-height: 13px; margin: 6px \
0px; padding: 8px; border-top-width: 1px; border-top-color: rgb(153, 153, 153); \
border-top-style: dotted; border-bottom-width: 1px; border-bottom-color: rgb(153, \
153, 153); border-bottom-style: dotted; font-family: 'Lucida Grande', Verdana, Arial, \
sans-serif; font-size: 11px; color: rgb(51, 51, 51);"><img \
src="data:image/gif;base64,R0lGODlhMAAwAOYAAAAAAAAAQAAAaAAAdAAAegAVfgAigwAthgAudgA1iQA \
8jAA+fgBAfwBBjgBE%20kABGggBMlABRlgFTmQNJhAVYnwcHDQkGCwoIDAtLhQtWmQ8NEBJXmRMSFRNNhhRYmx \
VboRYVGBpP%20iBsaHBxQiR1bnR5foyFcnSNeoCQkJSRUiydblidgnydhoilWjSlemixkpS1Yji5gmy5nqC5or \
DBn%20qDJjnjJpqzNmozlwszppoztnoEBAQUNto0dwp0hwpU1MTVB0plR4ql5/r1+BsGBfYGOCr2dnZ2eF%20s \
miHs2yKtXGMtXGNuHNzdHaRunmTvHp5en+Yv4Kav4KawIODg4yMjIyhxI+PkJCkxZKmyJOSk5Wo%20x5apyZqt \
zJubnJ6y0aK00aSkpKa41aq61ayrrK+vsLLC3LOztLjH4LzK4cHO5MLCwsPR58XS6MnW%2068vLy8/b79HR0dX \
g89rk9Nzc3N7p+OTk5Obu++fw/uvr6+vz//Pz8/b8//7+/gAAAAAAAAAAACH5%20BAkAAH0ALAAAAAAwADAAAA \
f/gH2Cg4ISJCaIiYqLjI2JLykAkpKEgi83NjIsjpydjw8AVExZAIQm%20NjYvnqudNAhTfHVzpZY4qqy4jS8LA \
Hh8s4IkOJu5xYovDABTk4I3t8bQNrx8eGalLzbQ2qe8empU%20pc7b0DKgpJIRNifjxjIYAHB8bgAeM+zGLx0A \
O2BMACTP7rGykczXLBPrBOKiAUoWGQAKi70YAcAI%20k2URczEEUIePtYy4CALQw6cLRJCrXkwAAAYOmJMoWyX \
LQoRUTE/SAPCJBfNmo41qqvX0uWijG39D%20iT6iSISPnqRKTbx4F/QJVKUbzSCNymgqADV81FwlqpKlGXBcF+ \
UD0CXsWJ8v/0IAmMPHalpFMlaO%20UWPl7U0a79zo8Xf3kb4fXfD4jUlDH915hRFNVHYustRIkyxYftECgAgUI \
Dhs7nyBg+nRAEqfjsw5%20tWnRrEm/hnYooETZqxuRICHB0CETuyEkMKSIt4ffJiREgODhEW7YuiXcuBHBQ4Td \
Dno4cQABAgkP%203XNsMLS8hokbGyBkAPic04oDYbgYgFDDAfc2caoQMJFAgQkCbAgxgH8DfIEFGiY00F1rqkH \
XiAFh%20eDGAFHGEQYALaGihRRV3JFFFHkqgkQcQR9CxxRZXiFEEG2+QQAEMruX24BdVCMADGnQQ0IAde6gg%2 \
0hhJhlBEDAWKk+IUcVVxRBZkXWsiRRnIwNkhCQmpBiMYAZcjRRgExsPFFimJ8UUYVNZwRxRdiPPkF%20F2Jw0U \
YTEXwQJQehIeQIBDy8GcQaUBxgghQ8NOHEGzwgEccSSQyxhA9sSFHEEU3oUEYZEZQQZWh9%202MlIcAk4oEB/GUjAnQIKHECqqfY18KkCqTbQXwStaYCpppsictwhuwG326686pqrrsC1RksfgQAA%20Ow==" \
width="48" height="48" style="float: left; margin: 4px;"><strong style="color: \
rgb(51, 51, 51);">Marc Boisis-Delavaud</strong><br>Direction du Système \
d'Information<br>Université de La Rochelle<br><a href="mailto:marc.boisis@univ-lr.fr" \
style="color: rgb(153, 153, 153); text-decoration: none; border-bottom-width: 1px; \
border-bottom-color: rgb(153, 153, 153); border-bottom-style: \
dotted;">marc.boisis@univ-lr.fr</a><span class="Apple-converted-space"> </span>| \
05 46 45 82 14</div></span></div><br><div><div>Le 10 janv. 2014 à 17:50, Luca Deri \
<<a href="mailto:deri@ntop.org">deri@ntop.org</a>> a écrit :</div><br \
class="Apple-interchange-newline"><blockquote type="cite"><div style="word-wrap: \
break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space;">Marc,<div>all you do is correct.</div><div><br></div><div>I \
suggest to use the latest ntopng code in SVN that works for \
me:</div><div><br></div><div>nProbe</div><div><div style="margin: 0px; font-size: \
11px; font-family: Menlo;">10/Jan/2014 17:50:28 [engine.c:2366] Emitting Flow: \
[->][tcp] 192.168.1.92:54826 -> 173.194.35.37:80 [2 pkt/104 bytes][ifIdx \
65535->65535][duration 0.0 sec][init Unknown]</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:28 [util.c:3527] [ZMQ] \
{"8":"173.194.35.37","12":"192.168.1.92","15":"0.0.0.0","10":65535,"14":65535,"2":1,"1 \
":52,"22":1389372623,"21":1389372623,"7":80,"11":54826,"6":17,"4":6,"5":0,"16":15169,"17":0,"9":0,"13":0,"42":304}</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:28 \
[engine.c:2388] Emitting Flow: [<-][tcp] 173.194.35.37:80 -> 192.168.1.92:54826 \
[1 pkt/52 bytes][ifIdx 65535->65535][0.0 sec]</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:28 [util.c:3527] [ZMQ] \
{"8":"192.168.1.92","12":"173.194.35.60","15":"0.0.0.0","10":65535,"14":65535,"2":2,"1 \
":104,"22":1389372623,"21":1389372623,"7":54790,"11":80,"6":17,"4":6,"5":0,"16":0,"17":15169,"9":0,"13":0,"42":305}</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:28 \
[engine.c:2366] Emitting Flow: [->][tcp] 192.168.1.92:54790 -> 173.194.35.60:80 \
[2 pkt/104 bytes][ifIdx 65535->65535][duration 0.0 sec][init Unknown]</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:28 \
[util.c:3527] [ZMQ] {"8":"173.194.35.60","12":"192.168.1.92","15":"0.0.0.0","10":65535 \
,"14":65535,"2":1,"1":52,"22":1389372623,"21":1389372623,"7":80,"11":54790,"6":17,"4":6,"5":0,"16":15169,"17":0,"9":0,"13":0,"42":306}</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:28 \
[engine.c:2388] Emitting Flow: [<-][tcp] 173.194.35.60:80 -> 192.168.1.92:54790 \
[1 pkt/52 bytes][ifIdx 65535->65535][0.0 sec]</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:30 [engine.c:2198] New Flow: \
[tcp] 192.168.1.92:53836 -> 146.48.98.155:993 [00:00:00:00:00:00 -> \
00:00:00:00:00:00][vlan 0][tos 0][ifIdx: 65535 -> 65535][subflowId: \
0/0x0000][idx=80426]</div></div><div><br></div><div><br></div><div><br></div><div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;"><span style="color: \
rgb(255, 255, 255); background-color: rgb(0, 0, 0);">deri@iMacLuca \
204></span><span class="Apple-converted-space"> </span>./ntopng -i<span \
class="Apple-converted-space"> </span><a \
href="tcp://127.0.0.1:5556">tcp://127.0.0.1:5556</a><span \
class="Apple-converted-space"> </span>-s -v</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:22 [Ntop.cpp:468] Setting \
local networks to 192.168.1.0/24,0.0.0.0/32,224.0.0.0/8,239.0.0.0/8,255.255.255.255/32,127.0.0.0/8</div><div \
style="margin: 0px; font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:22 \
[AddressResolution.cpp:131] Rule '192.168.1.0'/'24'</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:22 \
[AddressResolution.cpp:131] Rule '0.0.0.0'/'32'</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:22 \
[AddressResolution.cpp:131] Rule '224.0.0.0'/'8'</div><div style="margin: 0px; \
font-size: 11px; font-family: Menlo;">10/Jan/2014 17:50:22 \
Ntop mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" \
href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a> <a \
moz-do-not-send="true" class="moz-txt-link-freetext" \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/mailman/listinfo/ntop</a>
</pre></blockquote><br><br><div class="moz-signature">--<span \
class="Apple-converted-space"> </span><br>Stephen Clark<br><b>NetWolves</b>< \
br>Director of Technology<br>Phone: 813-579-3200<br>Fax: 813-882-0209<br>Email: <a \
moz-do-not-send="true" class="moz-txt-link-abbreviated" \
href="mailto:steve.clark@netwolves.com">steve.clark@netwolves.com</a><br><a \
moz-do-not-send="true" class="moz-txt-link-freetext" \
href="http://www.netwolves.com/">http://www.netwolves.com</a><br></div></div>_______________________________________________<br>Ntop \
mailing list<br><a moz-do-not-send="true" \
href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
moz-do-not-send="true" \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/m \
ailman/listinfo/ntop</a><br></blockquote></div><br></div></div>_______________________________________________<br>Ntop \
mailing list<br><a moz-do-not-send="true" \
href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
class="moz-txt-link-freetext" \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/mailman/listinfo/ntop</a><br></blockquote></div><br></div><br><fieldset \
class="mimeAttachmentHeader"></fieldset><br><pre \
wrap="">_______________________________________________ Ntop mailing list
<a class="moz-txt-link-abbreviated" \
href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a> <a \
class="moz-txt-link-freetext" \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/mailman/listinfo/ntop</a>
</pre></blockquote><br><br><div class="moz-signature">--<span \
class="Apple-converted-space"> </span><br>Stephen Clark<br><b>NetWolves</b>< \
br>Director of Technology<br>Phone: 813-579-3200<br>Fax: 813-882-0209<br>Email: <a \
class="moz-txt-link-abbreviated" \
href="mailto:steve.clark@netwolves.com">steve.clark@netwolves.com</a><br><a \
class="moz-txt-link-freetext" \
href="http://www.netwolves.com/">http://www.netwolves.com</a><br></div></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/m \
ailman/listinfo/ntop</a><br></blockquote></div><br></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/m \
ailman/listinfo/ntop</a><br></blockquote></div><br></div></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/m \
ailman/listinfo/ntop</a><br></blockquote></div><br></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/mailman/listinfo/ntop</a><br></blockquote></div><br \
style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: \
normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: \
auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; \
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span \
style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: \
normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: \
auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; \
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; \
display: inline !important;">_______________________________________________</span><br \
style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: \
normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: \
auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; \
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span \
style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: \
normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: \
auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; \
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; \
display: inline !important;">Ntop mailing list</span><br style="font-family: \
Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: \
normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: \
start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; \
word-spacing: 0px; -webkit-text-stroke-width: 0px;"><a \
href="mailto:Ntop@listgateway.unipi.it" style="font-family: Helvetica; font-size: \
12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: \
normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; \
text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; \
-webkit-text-stroke-width: 0px;">Ntop@listgateway.unipi.it</a><br style="font-family: \
Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: \
normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: \
start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; \
word-spacing: 0px; -webkit-text-stroke-width: 0px;"><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop" style="font-family: \
Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: \
normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: \
start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; \
word-spacing: 0px; -webkit-text-stroke-width: \
0px;">http://listgateway.unipi.it/mailman/listinfo/ntop</a></blockquote></div><br></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/m \
ailman/listinfo/ntop</a><br></blockquote></div><br></div></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/m \
ailman/listinfo/ntop</a><br></blockquote></div><br></div></div></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/m \
ailman/listinfo/ntop</a><br></blockquote></div><br></div></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/m \
ailman/listinfo/ntop</a><br></blockquote></div><br></div></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/m \
ailman/listinfo/ntop</a><br></blockquote></div><br></div></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</ \
a><br>http://listgateway.unipi.it/mailman/listinfo/ntop<br></blockquote></div><br></div></body></html>
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic