Closed bdollma closed 2 years ago
Hi, you need to use nprobe in collector mode. See https://www.ntop.org/nprobe/network-monitoring-101-a-beginners-guide-to-understanding-ntop-tools/, section Monitoring Netflow/sFlow Traffic
. Note also that nprobe requires a license or it will just work in demo mode and export only the first 25k flows.
@bdollma Hi, also very new to ntop and trying to achieve something similar (MacOS, use Docker). I've purchased a licence but can't figure out how to find 'System ID' and 'nProbe Version' - if you figured that out, could you please share how? Thank you
@clarenceharre you can read System ID and Version with --version of from the nProbe output as you can see in the output above:
05/Oct/2020 12:06:34 [nprobe.c:6765] Welcome to nProbe v.9.0.200511 ($Revision: 6814 $) for x86_64-pc-linux-gnu with native PF_RING acceleration 05/Oct/2020 12:06:34 [nprobe.c:6787] [LICENSE] nProbe SystemId: 12030603760C6B22
Thank you @cardigliano - I was able to find them by looking at the error message as you suggested.
After learning more about the "docker run" structure I realised that we can replace the "-i eth0" with "nprobe -h" and it'll generate the systemID, version number and a long list of commands we can use.
Ciao, Very new to ntop. I have a IPFIX traffic incoming to one of the interfaces on my laptop, specifically
utun4
. I want to be able to analyse the incoming IPFIX traffic with nProbe and pass it to ntopng through ZMQ. My OS is MacOS. I couldn't find any nProbe for MacOS so I thought, I will run nProbe as a container, while running ntopng natively. However when I run:I get the following:
It might be that I am missing something and this is not meant to work this way. Any help would be appreciated. Grazie