nprobe config

[CyberbreinAirw0lf]

Team,

Is there a way to use nprobe for converting packet data into netflow data? The packets are coming in via a Linux device on eth1-3. For example Netflow 5 or Netflow 9? Perhaps somebody can provide an example?

Thank you - Will

[simonemainardi]

Yes.

Examples:

• Convert traffic packets to NetFlow V9 exported to 1.2.3.4 port 2055

nprobe -i eno1 -n 1.2.3.4:2055 -V 9

• Convert NetFlow V5 coming on port 6343 to NetFlow v9 and export it to 1.2.3.4 port 2055

nprobe -i none -n 1.2.3.4:2055 --collector-port 6343

see https://www.ntop.org/guides/nprobe/configurations.html for full documentation

[CyberbreinAirw0lf]

Thank you - that was very helpfull