-
Hi everyone, I send netflow(V5) to elasticsearch through nprobe and ntopng, but I found that the MAC address are all 00:00:00:00:00:00.
:
```
input { tcp { port => "2514" } } output { }
```
- Sample Data:
```
while tru…
-
Hello,
I try to configure my Cisco router with nProbe/nTopNG.
My configuration is the following:
Cisco router --> nProbe (linux) --> nTopNG (Linux)
Cisco conf:
flow-export destination insid…
ghost updated
6 years ago
-
Hello, I’m trying to install nfdump so it can ingest data from pcap files. I’m definitely using the “--enable-readpcap” option when running configure. After running configure, I expected to see a make…
-
`For some reason we aren’t seeing the proper device type on two “host” elements in our demo environment. Could be on our end - they are a new type based on nProbe. Actual type string returned is “ho…
-
Why does this happen? Is it because i'm running community version on Raspberry Pi 3?
I have to sudo service nprobe stop, sudo service nprobe restart.
I also tried sudo nprobe --zmq="tcp://*:5556" …
-
hello everyone,
I want to monitor ipv4 and ipv6 all at once with ntopng. And I've added the local network to the ntopng.conf configuration file, as shown below:
![34906059-ad09fdd6-f897-11e7-8bf6-00…
-
The current setup is geared toward reading NetFlow v5,9,10.
Using the sflow input codec, samples can be taken from Arista and other gear utilizing the protocol, but the fields seem to be a bit differ…
-
This info is eating up my logfile.
How to turn down the logging level
Thank you
> # head -n 40 /var/log/fastnetmon.log
>
> 2016-08-22 22:15:49,265 [INFO] Logger initialized!
> 2016-08-22 22:15:49,2…
-
Hi,
The threshold_mbps config and lhr1_threshold_mbps(host group) in /etc/fastnetmon.conf is for a subnet or per host(/32) because i am using cisco routers with netflow v5. fastnetmon reports mult…