Thank you Simone, that is great, however I cannot get it working, I have changed "Disaggregation Criterion" from "none" to "VLAN id", then restarted ntopng, and pressed F5 on my browser, however I cannot see any change, on the interfaces dropdown I only see "tcp://127.0.0.1:5556"
Hope you can help. Regards.
Javier Narváez
----- Mensaje original -----
De: "Simone Mainardi" <mainardi@ntop.org>
Para: ntop-misc@listgateway.unipi.it
Enviados: Viernes, 10 de Noviembre 2017 19:39:16
Asunto: Re: [Ntop-misc] Nprobe: Filter netflow by VLAN tag
Yes, you can do that inside ntopng. See preferences / network interfaces and select VLAN disaggregation. then restart ntopng and you will have each VLAN as a separate interface.
> On 10 Nov 2017, at 17:06, Javier Narváez <jnarvaez@loading.es> wrote:
>
> Oh... And would be to possible to filter that vlan in ntopng? or configure nprobe in another mode?
>
> The data comes in sflow from an Arista Switch and there is a lot of flows I do not need...
>
> Thank you, kind regards.
>
> ----- Mensaje original -----
> De: "Simone Mainardi" <mainardi@ntop.org>
> Para: ntop-misc@listgateway.unipi.it
> Enviados: Viernes, 10 de Noviembre 2017 17:08:16
> Asunto: Re: [Ntop-misc] Nprobe: Filter netflow by VLAN tag
>
> Javier,
>
> VLAN -- or, more in general, BPF -- filters are not supported when nProbe is used in collector mode.
>
>
> Simone
>
>> On 10 Nov 2017, at 13:16, Javier Narváez <jnarvaez@loading.es> wrote:
>>
>> Hi,
>>
>> I am running nprobe as follows:
>> nprobe --collector=none --zmq="tcp://127.0.0.1:5556" --collector-port=9996 --interface=none -V 10 --verbose=2
>>
>> And I get a lot of lines like this with several VLAN ids:
>> 10/Nov/2017 14:14:24 [engine.c:2886] Emitting Flow: [->][tcp] 5.6.7.8:63826 -> 1.2.3.4:80 [1 pkt/52 bytes][ifIdx 1000001->1000010][0.0 sec][VLAN 190/190][init Unknown][AS: xxx -> xxx]
>>
>> Would be possible to filter by VLAN and only send VLAN 190 to ntopng?
>>
>> Thank you in advance, kind regards.
>> Javier Narváez
>> <logo-150-ancho.png>_______________________________________________
>> Ntop-misc mailing list
>> Ntop-misc@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc