Mailing List Archive

NProbe as "probe+proxy" mode
Hi all,

Running nprobe.x86_64 7.4.161108-5334 on CentOS 7, i already have it
working as probe mode, but need to be able to convert from cisco asa flows
to standard v9 netflows, and export to the same collectors the probe is
already exporting.

What's the best way of having, on the same machine, nprobe working as a
"probe + proxy" modes?
Does one need to trigger two instances of nprobe for each mode?

Thank you
Marco
Re: NProbe as "probe+proxy" mode [ In reply to ]
Hi Marco,



On Thu, Mar 16, 2017 at 2:06 PM, Marco Teixeira <marco@scom.uminho.pt>
wrote:

> Hi all,
>
> Running nprobe.x86_64 7.4.161108-5334 on CentOS 7, i already have it
> working as probe mode, but need to be able to convert from cisco asa flows
> to standard v9 netflows, and export to the same collectors the probe is
> already exporting.
>
> What's the best way of having, on the same machine, nprobe working as a
> "probe + proxy" modes?
> Does one need to trigger two instances of nprobe for each mode?
>

Yes, a single instance can't act simultaneously as probe and collector. It
will notify you with the following message:

17/Mar/2017 14:14:08 [nprobe.c:5445] -i is ignored as --collector-port|-3
has been used: using '-i none'


In essence, you need to trigger two instances.



>
> Thank you
> Marco
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>