Hi Luca,
I see this:
root@ntop:/etc/nprobe# nprobe --collector-port=4711
--dump-pkts=/tmp/netflow.pcap
07/Apr/2017 09:09:56 [nprobe.c:3407] Valid nProbe license found
07/Apr/2017 09:09:56 [nprobe.c:4586] Dumping incoming packets on
/tmp/netflow.pcap
07/Apr/2017 09:09:56 [nprobe.c:4872] WARNING: The output interfaceId is
set to 0: did you forget to use -Q perhaps ?
07/Apr/2017 09:09:56 [nprobe.c:4875] WARNING: The input interfaceId is
set to 0: did you forget to use -u perhaps ?
07/Apr/2017 09:09:56 [nprobe.c:4916] -i is ignored as
--collector-port|-3 has been used: using '-i none'
07/Apr/2017 09:09:56 [nprobe.c:4975] Welcome to nProbe v.7.4.170215
($Revision: 5334 $) for x86_64-unknown-linux-gnu with native PF_RING
acceleration
07/Apr/2017 09:09:56 [nprobe.c:4985] Running on Debian GNU/Linux 8.2
(jessie)
07/Apr/2017 09:09:56 [nprobe.c:4996] [LICENSE] nProbe SystemId:
9C3A8E0D00001090
07/Apr/2017 09:09:56 [nprobe.c:5085] WARNING: -n parameter is missing.
127.0.0.1:2055 will be used.
07/Apr/2017 09:09:56 [nprobe.c:7308] Welcome to nProbe v.7.4.170215 for
x86_64-unknown-linux-gnu
07/Apr/2017 09:09:56 [plugin.c:1045] 0 plugin(s) enabled
07/Apr/2017 09:09:56 [nprobe.c:6836] Non IPv4/v6 traffic is discarded
according to the template
07/Apr/2017 09:09:56 [util.c:434] GeoIP: loaded AS config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat
07/Apr/2017 09:09:56 [util.c:445] GeoIP: loaded AS IPv6 config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat
07/Apr/2017 09:09:56 [nprobe.c:5495] Using packet capture length 128
07/Apr/2017 09:09:56 [nprobe.c:7484] IPv6 traffic will NOT be
exported/accounted by this probe
07/Apr/2017 09:09:56 [nprobe.c:7485] due to configuration options (e.g.
use NetFlow v9)
07/Apr/2017 09:09:56 [nprobe.c:7631] Not capturing packet from interface
(collector mode)
07/Apr/2017 09:09:56 [collect.c:147] Flow collector listening on port
4711 (IPv4/v6)
07/Apr/2017 09:09:56 [nprobe.c:7856] nProbe started successfully
07/Apr/2017 09:10:18 [export.c:503] WARNING: Unable to export non-IPv4
flows using NetFlow v5. Dropped.
Most notable:
07/Apr/2017 09:09:56 [nprobe.c:7484] IPv6 traffic will NOT be
exported/accounted by this probe
Any suggestions?
TIA
Matthias
Am 06.04.2017 um 15:56 schrieb Luca Deri:
> Hi Matthias
> just generate a pcap with wireshark where you filter just flows. Until a template is received, wireshark is unable to decode the traffic, so you can stop *after* wireshark is able to decode the flows as it means that the template has been received
>
> Luca
>
>> On 6 Apr 2017, at 15:53, Matthias Henze <lists@mhcsoftware.de> wrote:
>>
>> Hi Luca,
>>
>> generation a pcap is no problem, but what is a "template" in this context?
>>
>> TIA
>> Matthias
>>
>> Am 05.04.2017 um 21:24 schrieb Luca Deri:
>>> Hi Matthias
>>> perhaps the template the Mikrotik is using is not handled properly. Can you please send me (not to the list) a pcap containing template+some IPv6 flows?
>>>
>>> Thanks Luca
>>>
>>>> On 5 Apr 2017, at 17:25, Matthias Henze <lists@mhcsoftware.de> wrote:
>>>>
>>>> Hi,
>>>>
>>>> I use NetFolow to send traffic data from my Microtik routers to Nprobe and Ntop. This works as expected for IPv4 but no IPv6 traffic is recorded. What may cause this?
>>>>
>>>> TIA
>>>> Matthias
>>>>
>>>>
>>>> --
>>>>
>>>> MHC SoftWare GmbH
>>>> Fichtera 17
>>>> 96274 Itzgrund/Germany
>>>> voice: +49-(0)9533-92006-0
>>>> fax: +49-(0)9533-92006-6
>>>> e-mail: info@mhcsoftware.de
>>>>
>>>> HR Coburg: B2242
>>>> Geschaeftsfuehrer: Matthias Henze
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Ntop mailing list
>>>> Ntop@listgateway.unipi.it
>>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>>> _______________________________________________
>>> Ntop mailing list
>>> Ntop@listgateway.unipi.it
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>>
>>
>>
>> --
>>
>> MHC SoftWare GmbH
>> Fichtera 17
>> 96274 Itzgrund/Germany
>> voice: +49-(0)9533-92006-0
>> fax: +49-(0)9533-92006-6
>> e-mail: info@mhcsoftware.de
>>
>> HR Coburg: B2242
>> Geschaeftsfuehrer: Matthias Henze
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
--
MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany
voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: info@mhcsoftware.de
HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop