'Re: [Ntop] ntop collector netflow cisco'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntop
Subject:    Re: [Ntop] ntop collector netflow cisco
From:       "Warren Daly (OPUS)" <warren () opus ! com ! kh>
Date:       2016-05-18 5:08:08
Message-ID: 573BF8B8.1060102 () opus ! com ! kh
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

Spiderslack
I believe you'll need to start nprobe
it will collect the Netflows for you, process them, and connects with ntopng

I configure my Cisco device to send to port 2055
 >ip flow-export destination 192.168.1.5 2055

Then I start nprobe as follows
$nprobe --zmq tcp://*:5555 -i none -n none --collector-port 2055

nprobe listens on port 2055, collects and processes the flows, and hands 
them off to the ntopng frontend.

in my ntopng.conf file I enter this
-i=tcp://127.0.0.1:5555

Hope that helps.
Warren

On 18/05/16 04:04, spiderslack wrote:
> Hi all.
> I am interested in testing the ntopng to monitor my environment, but I 
> have Cisco devices on my network, I use the netflow protocol. I ran 
> the ntopng with the following command.
>
> ntopng -i tcp://192.168.1.5:5556
>
> and my test router used the following commands
>
> ip flow-export version 5
> ip flow-export destination 192.168.1.5 5556
> Interface FastEthernet 0/1
>          ip flow egress
>          ip flow ingress
>          ip route-cache flow
>
>
>
>
>
> However, the collection does not work is displaying the following 
> message:
>
>
> No packet has been received yet on interface tcp://192.168.1.5:5556.
> Please wait 8 seconds until this page reloads.
>
>
> ie not collecting researching found that need nprobe, and the same 
> need and paid leave but wanted to just test is it possible? in the 
> execution of it he says that is limited to 25000 flows that is sent to 
> 25000 flows ntop it stops working? another question I can not do the 
> cisco router send straight to ntopng need to go through nprobe?
>
>
> Regards.
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

[Attachment #5 (text/html)]

<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <font face="Verdana">Spiderslack<br>
      I believe you'll need to start nprobe<br>
      it will collect the Netflows for you, process them, and connects
      with ntopng<br>
      <br>
      I configure my Cisco device to send to port 2055<br>
    </font><font face="Verdana">&gt;ip flow-export destination
      192.168.1.5 2055<br>
      <br>
      Then I start nprobe as follows<br>
      $nprobe --zmq tcp://*:5555 -i none -n none --collector-port 2055<br>
      <br>
      nprobe listens on port 2055, collects and processes the flows, and
      hands them off to the ntopng frontend. <br>
      <br>
      in my ntopng.conf file I enter this<br>
      -i=tcp://127.0.0.1:5555<br>
      <br>
      Hope that helps.<br>
      Warren <br>
      <br>
      <br>
      <br>
    </font>
    <div class="moz-cite-prefix">On 18/05/16 04:04, spiderslack wrote:<br>
    </div>
    <blockquote cite="mid:573B8746.7070600@yahoo.com.br" type="cite">Hi
      all.
      <br>
      I am interested in testing the ntopng to monitor my environment,
      but I have Cisco devices on my network, I use the netflow
      protocol. I ran the ntopng with the following command.
      <br>
      <br>
      ntopng -i tcp://192.168.1.5:5556
      <br>
      <br>
      and my test router used the following commands
      <br>
      <br>
      ip flow-export version 5
      <br>
      ip flow-export destination 192.168.1.5 5556
      <br>
      Interface FastEthernet 0/1
      <br>
               ip flow egress
      <br>
               ip flow ingress
      <br>
               ip route-cache flow
      <br>
      <br>
      <br>
      <br>
      <br>
      <br>
      However, the collection does not work is displaying the following
      message:
      <br>
      <br>
      <br>
      No packet has been received yet on interface
      tcp://192.168.1.5:5556.
      <br>
      Please wait 8 seconds until this page reloads.
      <br>
      <br>
      <br>
      ie not collecting researching found that need nprobe, and the same
      need and paid leave but wanted to just test is it possible? in the
      execution of it he says that is limited to 25000 flows that is
      sent to 25000 flows ntop it stops working? another question I can
      not do the cisco router send straight to ntopng need to go through
      nprobe?
      <br>
      <br>
      <br>
      Regards.
      <br>
      <br>
      _______________________________________________
      <br>
      Ntop mailing list
      <br>
      <a class="moz-txt-link-abbreviated" \
href="mailto:Ntop@listgateway.unipi.it">Ntop@listgateway.unipi.it</a>  <br>
      <a class="moz-txt-link-freetext" \
href="http://listgateway.unipi.it/mailman/listinfo/ntop">http://listgateway.unipi.it/mailman/listinfo/ntop</a>
  <br>
      <br>
    </blockquote>
    <br>
  </body>
</html>

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

[prev in list] [next in list] [prev in thread] [next in thread] 