Mailing List Archive

Strange "Seen Since" value ...
Hi,

all views under "Hosts" (Hosts, Network, Countries, etc.) show strange
"Seen Since" values: 47 years, 111 days, 16 h, 47 min, 32 sec

How to fix this?

TIA
Matthias


--

MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany

voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: info@mhcsoftware.de

HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze



_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: Strange "Seen Since" value ... [ In reply to ]
try version 2.5 that solves the issue

On Mon, Apr 10, 2017 at 6:49 PM, Matthias Henze <lists@mhcsoftware.de>
wrote:

> Hi,
>
> all views under "Hosts" (Hosts, Network, Countries, etc.) show strange
> "Seen Since" values: 47 years, 111 days, 16 h, 47 min, 32 sec
>
> How to fix this?
>
> TIA
> Matthias
>
>
> --
>
> MHC SoftWare GmbH
> Fichtera 17
> 96274 Itzgrund/Germany
> voice: +49-(0)9533-92006-0
> fax: +49-(0)9533-92006-6
> e-mail: info@mhcsoftware.de
>
> HR Coburg: B2242
> Geschaeftsfuehrer: Matthias Henze
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
Re: Strange "Seen Since" value ... [ In reply to ]
try version 2.5 that solves the issue

On Mon, Apr 10, 2017 at 6:49 PM, Matthias Henze <lists@mhcsoftware.de>
wrote:

> Hi,
>
> all views under "Hosts" (Hosts, Network, Countries, etc.) show strange
> "Seen Since" values: 47 years, 111 days, 16 h, 47 min, 32 sec
>
> How to fix this?
>
> TIA
> Matthias
>
>
> --
>
> MHC SoftWare GmbH
> Fichtera 17
> 96274 Itzgrund/Germany
> voice: +49-(0)9533-92006-0
> fax: +49-(0)9533-92006-6
> e-mail: info@mhcsoftware.de
>
> HR Coburg: B2242
> Geschaeftsfuehrer: Matthias Henze
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
Re: Strange "Seen Since" value ... [ In reply to ]
Am 10.04.2017 um 19:28 schrieb Simone Mainardi:
> try version 2.5 that solves the issue

Upgraded ... success: no traffic gets recorde :(


--

MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany

voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: info@mhcsoftware.de

HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze



_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: Strange "Seen Since" value ... [ In reply to ]
Matthias, please, report the configuration used

On Mon, Apr 10, 2017 at 7:41 PM, Matthias Henze <lists@mhcsoftware.de>
wrote:

> Am 10.04.2017 um 19:28 schrieb Simone Mainardi:
>
>> try version 2.5 that solves the issue
>>
>
> Upgraded ... success: no traffic gets recorde :(
>
>
>
> --
>
> MHC SoftWare GmbH
> Fichtera 17
> 96274 Itzgrund/Germany
> voice: +49-(0)9533-92006-0
> fax: +49-(0)9533-92006-6
> e-mail: info@mhcsoftware.de
>
> HR Coburg: B2242
> Geschaeftsfuehrer: Matthias Henze
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
Re: Strange "Seen Since" value ... [ In reply to ]
Matthias, please, report the configuration used

On Mon, Apr 10, 2017 at 7:41 PM, Matthias Henze <lists@mhcsoftware.de>
wrote:

> Am 10.04.2017 um 19:28 schrieb Simone Mainardi:
>
>> try version 2.5 that solves the issue
>>
>
> Upgraded ... success: no traffic gets recorde :(
>
>
>
> --
>
> MHC SoftWare GmbH
> Fichtera 17
> 96274 Itzgrund/Germany
> voice: +49-(0)9533-92006-0
> fax: +49-(0)9533-92006-6
> e-mail: info@mhcsoftware.de
>
> HR Coburg: B2242
> Geschaeftsfuehrer: Matthias Henze
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
Re: Strange "Seen Since" value ... [ In reply to ]
nprobe 1

--zmq="tcp://127.0.0.1:5556"
--collector-port=4711
-n=none
-i=none
--pid-file=/var/run/nprobe-rh.pid
-T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP
%OUTPUT_SNMP %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS
%FLOW_END_MILLISECONDS %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL
%SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR
%IPV6_SRC_MASK %IPV6_DST_MASK %IP_PROTOCOL_VERSION %FIRST_SWITCHED
%LAST_SWITCHED %EXPORTER_IPV4_ADDRESS %EXPORTER_IPV4_ADDRESS
%EXPORTER_IPV4_ADDRESS %NPROBE_IPV4_ADDRESS %INPUT_SNMP %OUTPUT_SNMP"

nprobe 2

--zmq="tcp://127.0.0.1:5557"
--collector-port=4712
-n=none
-i=none
--pid-file=/var/run/nprobe-tk.pid
-T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP
%OUTPUT_SNMP %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS
%FLOW_END_MILLISECONDS %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL
%SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR
%IPV6_SRC_MASK %IPV6_DST_MASK %IP_PROTOCOL_VERSION %FIRST_SWITCHED
%LAST_SWITCHED %EXPORTER_IPV4_ADDRESS %EXPORTER_IPV4_ADDRESS
%EXPORTER_IPV4_ADDRESS %NPROBE_IPV4_ADDRESS %INPUT_SNMP %OUTPUT_SNMP"

ntop

-G=/var/run/ntopng.pid
--interface="tcp://127.0.0.1:5556"
--interface="tcp://127.0.0.1:5557"
-F="mysql;localhost;ntop;flows;ntop;ntop"
-m="x.x.x.x,x.x.x.x/x,x:x:x:x:x::/x,x:x:x:x:x::/x"
-D=all
-p="/etc/ntopng/protos.txt"


Am 10.04.2017 um 22:19 schrieb Simone Mainardi:
> Matthias, please, report the configuration used
>
> On Mon, Apr 10, 2017 at 7:41 PM, Matthias Henze <lists@mhcsoftware.de
> <mailto:lists@mhcsoftware.de>> wrote:
>
> Am 10.04.2017 um 19:28 schrieb Simone Mainardi:
>
> try version 2.5 that solves the issue
>
>
> Upgraded ... success: no traffic gets recorde :(
>
>
>
> --
>
> MHC SoftWare GmbH
> Fichtera 17
> 96274 Itzgrund/Germany
> voice: +49-(0)9533-92006-0 <tel:%2B49-%280%299533-92006-0>
> fax: +49-(0)9533-92006-6 <tel:%2B49-%280%299533-92006-6>
> e-mail: info@mhcsoftware.de <mailto:info@mhcsoftware.de>
>
> HR Coburg: B2242
> Geschaeftsfuehrer: Matthias Henze
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it <mailto:Ntop@listgateway.unipi.it>
> http://listgateway.unipi.it/mailman/listinfo/ntop
> <http://listgateway.unipi.it/mailman/listinfo/ntop>
>
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>


--

MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany

voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: info@mhcsoftware.de

HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze



_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: Strange "Seen Since" value ... [ In reply to ]
Hi Matthias,

Add option -b=2 to nProbe and -v=5 to ntopng, respectively. Run the
softwares in foreground. You should start seeing JSON messages in the
consoles. Please, report the behavior.

Regards,
Simone

On Tue, Apr 11, 2017 at 5:59 AM, Matthias Henze <lists@mhcsoftware.de>
wrote:

> nprobe 1
>
> --zmq="tcp://127.0.0.1:5556"
> --collector-port=4711
> -n=none
> -i=none
> --pid-file=/var/run/nprobe-rh.pid
> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP
> %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS
> %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS
> %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK
> %IP_PROTOCOL_VERSION %FIRST_SWITCHED %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS
> %EXPORTER_IPV4_ADDRESS %EXPORTER_IPV4_ADDRESS %NPROBE_IPV4_ADDRESS
> %INPUT_SNMP %OUTPUT_SNMP"
>
> nprobe 2
>
> --zmq="tcp://127.0.0.1:5557"
> --collector-port=4712
> -n=none
> -i=none
> --pid-file=/var/run/nprobe-tk.pid
> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP
> %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS
> %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS
> %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK
> %IP_PROTOCOL_VERSION %FIRST_SWITCHED %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS
> %EXPORTER_IPV4_ADDRESS %EXPORTER_IPV4_ADDRESS %NPROBE_IPV4_ADDRESS
> %INPUT_SNMP %OUTPUT_SNMP"
>
> ntop
>
> -G=/var/run/ntopng.pid
> --interface="tcp://127.0.0.1:5556"
> --interface="tcp://127.0.0.1:5557"
> -F="mysql;localhost;ntop;flows;ntop;ntop"
> -m="x.x.x.x,x.x.x.x/x,x:x:x:x:x::/x,x:x:x:x:x::/x"
> -D=all
> -p="/etc/ntopng/protos.txt"
>
>
> Am 10.04.2017 um 22:19 schrieb Simone Mainardi:
>
>> Matthias, please, report the configuration used
>>
>> On Mon, Apr 10, 2017 at 7:41 PM, Matthias Henze <lists@mhcsoftware.de
>> <mailto:lists@mhcsoftware.de>> wrote:
>>
>> Am 10.04.2017 um 19:28 schrieb Simone Mainardi:
>>
>> try version 2.5 that solves the issue
>>
>>
>> Upgraded ... success: no traffic gets recorde :(
>>
>>
>>
>> --
>>
>> MHC SoftWare GmbH
>> Fichtera 17
>> 96274 Itzgrund/Germany
>> voice: +49-(0)9533-92006-0 <tel:%2B49-%280%299533-92006-0>
>> fax: +49-(0)9533-92006-6 <tel:%2B49-%280%299533-92006-6>
>> e-mail: info@mhcsoftware.de <mailto:info@mhcsoftware.de>
>>
>> HR Coburg: B2242
>> Geschaeftsfuehrer: Matthias Henze
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it <mailto:Ntop@listgateway.unipi.it>
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>> <http://listgateway.unipi.it/mailman/listinfo/ntop>
>>
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>
> --
>
> MHC SoftWare GmbH
> Fichtera 17
> 96274 Itzgrund/Germany
> voice: +49-(0)9533-92006-0
> fax: +49-(0)9533-92006-6
> e-mail: info@mhcsoftware.de
>
> HR Coburg: B2242
> Geschaeftsfuehrer: Matthias Henze
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
Re: Strange "Seen Since" value ... [ In reply to ]
Hi Matthias,

Add option -b=2 to nProbe and -v=5 to ntopng, respectively. Run the
softwares in foreground. You should start seeing JSON messages in the
consoles. Please, report the behavior.

Regards,
Simone

On Tue, Apr 11, 2017 at 5:59 AM, Matthias Henze <lists@mhcsoftware.de>
wrote:

> nprobe 1
>
> --zmq="tcp://127.0.0.1:5556"
> --collector-port=4711
> -n=none
> -i=none
> --pid-file=/var/run/nprobe-rh.pid
> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP
> %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS
> %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS
> %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK
> %IP_PROTOCOL_VERSION %FIRST_SWITCHED %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS
> %EXPORTER_IPV4_ADDRESS %EXPORTER_IPV4_ADDRESS %NPROBE_IPV4_ADDRESS
> %INPUT_SNMP %OUTPUT_SNMP"
>
> nprobe 2
>
> --zmq="tcp://127.0.0.1:5557"
> --collector-port=4712
> -n=none
> -i=none
> --pid-file=/var/run/nprobe-tk.pid
> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP
> %IN_PKTS %IN_BYTES %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS
> %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS
> %IPV4_SRC_MASK %IPV6_SRC_ADDR %IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK
> %IP_PROTOCOL_VERSION %FIRST_SWITCHED %LAST_SWITCHED %EXPORTER_IPV4_ADDRESS
> %EXPORTER_IPV4_ADDRESS %EXPORTER_IPV4_ADDRESS %NPROBE_IPV4_ADDRESS
> %INPUT_SNMP %OUTPUT_SNMP"
>
> ntop
>
> -G=/var/run/ntopng.pid
> --interface="tcp://127.0.0.1:5556"
> --interface="tcp://127.0.0.1:5557"
> -F="mysql;localhost;ntop;flows;ntop;ntop"
> -m="x.x.x.x,x.x.x.x/x,x:x:x:x:x::/x,x:x:x:x:x::/x"
> -D=all
> -p="/etc/ntopng/protos.txt"
>
>
> Am 10.04.2017 um 22:19 schrieb Simone Mainardi:
>
>> Matthias, please, report the configuration used
>>
>> On Mon, Apr 10, 2017 at 7:41 PM, Matthias Henze <lists@mhcsoftware.de
>> <mailto:lists@mhcsoftware.de>> wrote:
>>
>> Am 10.04.2017 um 19:28 schrieb Simone Mainardi:
>>
>> try version 2.5 that solves the issue
>>
>>
>> Upgraded ... success: no traffic gets recorde :(
>>
>>
>>
>> --
>>
>> MHC SoftWare GmbH
>> Fichtera 17
>> 96274 Itzgrund/Germany
>> voice: +49-(0)9533-92006-0 <tel:%2B49-%280%299533-92006-0>
>> fax: +49-(0)9533-92006-6 <tel:%2B49-%280%299533-92006-6>
>> e-mail: info@mhcsoftware.de <mailto:info@mhcsoftware.de>
>>
>> HR Coburg: B2242
>> Geschaeftsfuehrer: Matthias Henze
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it <mailto:Ntop@listgateway.unipi.it>
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>> <http://listgateway.unipi.it/mailman/listinfo/ntop>
>>
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>
> --
>
> MHC SoftWare GmbH
> Fichtera 17
> 96274 Itzgrund/Germany
> voice: +49-(0)9533-92006-0
> fax: +49-(0)9533-92006-6
> e-mail: info@mhcsoftware.de
>
> HR Coburg: B2242
> Geschaeftsfuehrer: Matthias Henze
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
Re: Strange "Seen Since" value ... [ In reply to ]
Hi Simone,

Am 11.04.2017 um 11:15 schrieb Simone Mainardi:
> Add option -b=2 to nProbe and -v=5 to ntopng, respectively. Run the
> softwares in foreground. You should start seeing JSON messages in the
> consoles. Please, report the behavior.


nprobe:

11/Apr/2017 13:47:39 [nprobe.c:3615] Valid nProbe license found
11/Apr/2017 13:47:39 [nprobe.c:5489] WARNING: The output interfaceId is
set to 0: did you forget to use -Q perhaps ?
11/Apr/2017 13:47:39 [nprobe.c:5492] WARNING: The input interfaceId is
set to 0: did you forget to use -u perhaps ?
11/Apr/2017 13:47:39 [nprobe.c:5591] Welcome to nProbe v.7.5.170410
($Revision: 5721 $) for x86_64-unknown-linux-gnu with native PF_RING
acceleration
11/Apr/2017 13:47:39 [nprobe.c:5601] Running on Debian GNU/Linux 8.2
(jessie)
11/Apr/2017 13:47:39 [nprobe.c:5612] [LICENSE] nProbe SystemId:
9C3A8E0D00001090
11/Apr/2017 13:47:39 [nprobe.c:5663] Tracing enabled
11/Apr/2017 13:47:39 [nprobe.c:5726] Sample rate [packet: 1][flow: 1]
11/Apr/2017 13:47:39 [plugin.c:260] 0 plugin(s) loaded [0 delete][0 packet].
11/Apr/2017 13:47:39 [nprobe.c:8048] Welcome to nProbe v.7.5.170410 for
x86_64-unknown-linux-gnu
11/Apr/2017 13:47:39 [nprobe.c:7078] Compiling flow templates...
11/Apr/2017 13:47:39 [nprobe.c:7124] Using NetFlow Packet Payload Len: 1472
11/Apr/2017 13:47:39 [template.c:1783] Duplicate template element found
IPV4_SRC_ADDR: skipping
11/Apr/2017 13:47:39 [template.c:1783] Duplicate template element found
IPV4_DST_ADDR: skipping
11/Apr/2017 13:47:39 [template.c:1783] Duplicate template element found
IPV4_SRC_MASK: skipping
11/Apr/2017 13:47:39 [template.c:1783] Duplicate template element found
IPV6_SRC_ADDR: skipping
11/Apr/2017 13:47:39 [template.c:1783] Duplicate template element found
IPV6_DST_ADDR: skipping
11/Apr/2017 13:47:39 [template.c:1783] Duplicate template element found
IPV6_SRC_MASK: skipping
11/Apr/2017 13:47:39 [template.c:1783] Duplicate template element found
IPV6_SRC_ADDR: skipping
11/Apr/2017 13:47:39 [template.c:1783] Duplicate template element found
IPV6_DST_ADDR: skipping
11/Apr/2017 13:47:39 [template.c:1783] Duplicate template element found
IPV6_SRC_MASK: skipping
11/Apr/2017 13:47:39 [plugin.c:1068] 0 plugin(s) enabled
11/Apr/2017 13:47:39 [nprobe.c:7467] Scanning flow template...
11/Apr/2017 13:47:39 [nprobe.c:7477] Template [id=257]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IN_BYTES [num
1][id 1][4 bytes][total 4 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IN_PKTS [num
2][id 2][4 bytes][total 8 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found PROTOCOL [num
3][id 4][1 bytes][total 9 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found SRC_TOS [num
4][id 5][1 bytes][total 10 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found TCP_FLAGS [num
5][id 6][1 bytes][total 11 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found L4_SRC_PORT [num
6][id 7][2 bytes][total 13 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV4_SRC_ADDR [num
7][id 8][4 bytes][total 17 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV4_SRC_MASK [num
8][id 9][1 bytes][total 18 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found INPUT_SNMP [num
9][id 10][4 bytes][total 22 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found L4_DST_PORT [num
10][id 11][2 bytes][total 24 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV4_DST_ADDR [num
11][id 12][4 bytes][total 28 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV4_DST_MASK [num
12][id 13][1 bytes][total 29 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found OUTPUT_SNMP [num
13][id 14][4 bytes][total 33 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV4_NEXT_HOP [num
14][id 15][4 bytes][total 37 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found SRC_AS [num
15][id 16][4 bytes][total 41 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found DST_AS [num
16][id 17][4 bytes][total 45 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found LAST_SWITCHED [num
17][id 21][4 bytes][total 49 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found FIRST_SWITCHED [num
18][id 22][4 bytes][total 53 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IP_PROTOCOL_VERSION [num
19][id 60][1 bytes][total 54 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found EXPORTER_IPV4_ADDRESS [num
20][id 130][4 bytes][total 58 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found FLOW_START_MILLISECONDS [num
21][id 152][8 bytes][total 66 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found FLOW_END_MILLISECONDS [num
22][id 153][8 bytes][total 74 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7477] Template [id=258]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IN_BYTES [num
1][id 1][4 bytes][total 4 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IN_PKTS [num
2][id 2][4 bytes][total 8 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found PROTOCOL [num
3][id 4][1 bytes][total 9 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found SRC_TOS [num
4][id 5][1 bytes][total 10 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found TCP_FLAGS [num
5][id 6][1 bytes][total 11 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found L4_SRC_PORT [num
6][id 7][2 bytes][total 13 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found INPUT_SNMP [num
7][id 10][4 bytes][total 17 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found L4_DST_PORT [num
8][id 11][2 bytes][total 19 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found OUTPUT_SNMP [num
9][id 14][4 bytes][total 23 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found SRC_AS [num
10][id 16][4 bytes][total 27 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found DST_AS [num
11][id 17][4 bytes][total 31 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found LAST_SWITCHED [num
12][id 21][4 bytes][total 35 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found FIRST_SWITCHED [num
13][id 22][4 bytes][total 39 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV6_SRC_ADDR [num
14][id 27][16 bytes][total 55 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV6_DST_ADDR [num
15][id 28][16 bytes][total 71 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV6_SRC_MASK [num
16][id 29][1 bytes][total 72 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV6_DST_MASK [num
17][id 30][1 bytes][total 73 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IP_PROTOCOL_VERSION [num
18][id 60][1 bytes][total 74 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found IPV6_NEXT_HOP [num
19][id 62][16 bytes][total 90 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found EXPORTER_IPV6_ADDRESS [num
20][id 131][16 bytes][total 106 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found FLOW_START_MILLISECONDS [num
21][id 152][8 bytes][total 114 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7483] Found FLOW_END_MILLISECONDS [num
22][id 153][8 bytes][total 122 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7507] Scanning option template...
11/Apr/2017 13:47:39 [nprobe.c:7513] Found TOTAL_FLOWS_EXP [id
42][4 bytes][total 4 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7513] Found TOTAL_PKTS_EXP [id
41][4 bytes][total 8 bytes]
11/Apr/2017 13:47:39 [nprobe.c:7545] Each flow is 122 bytes long
11/Apr/2017 13:47:39 [nprobe.c:7546] The # flows per packet has been set
to 11
11/Apr/2017 13:47:39 [nprobe.c:7549] IP TOS is accounted
11/Apr/2017 13:47:39 [nprobe.c:7575] Non IPv4/v6 traffic is discarded
according to the template
11/Apr/2017 13:47:39 [util.c:430] GeoIP: loaded AS config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat
11/Apr/2017 13:47:39 [util.c:441] GeoIP: loaded AS IPv6 config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat
11/Apr/2017 13:47:39 [nprobe.c:8229] The flows hash has 131072 buckets
11/Apr/2017 13:47:39 [nprobe.c:8231] Flows older than 120 seconds will
be exported
11/Apr/2017 13:47:39 [nprobe.c:8234] Flows inactive for at least 30
seconds will be exported
11/Apr/2017 13:47:39 [nprobe.c:8237] Expired flows will not be queued
for more than 30 seconds
11/Apr/2017 13:47:39 [nprobe.c:8244] Exported flows with engineType 0
and engineId 91
11/Apr/2017 13:47:39 [nprobe.c:8304] Flows will be emitted in NetFlow 9
format
11/Apr/2017 13:47:39 [nprobe.c:8359] Flow input interface index is set to 0
11/Apr/2017 13:47:39 [nprobe.c:8365] Flow output interface index is set to 0
11/Apr/2017 13:47:39 [nprobe.c:8379] Not capturing packet from interface
(collector mode)
11/Apr/2017 13:47:39 [util.c:4127] Initializing ZMQ as server
11/Apr/2017 13:47:39 [util.c:4170] Succesfully created ZMQ endpoint
tcp://127.0.0.1:5556
11/Apr/2017 13:47:39 [util.c:3216] nProbe changed user to 'nobody'
11/Apr/2017 13:47:39 [collect.c:84] Created UDP sockets
11/Apr/2017 13:47:39 [collect.c:143] Flow collector listening on port
4711 (IPv4/v6)
11/Apr/2017 13:47:39 [nprobe.c:8503] Starting 1 packet fetch thread(s)
11/Apr/2017 13:47:39 [nprobe.c:8605] nProbe started successfully
11/Apr/2017 13:47:39 [engine.c:3451] Starting bucket dequeue thread



ntop

11/Apr/2017 13:49:38 [Ntop.cpp:1314] Setting local networks to ........
11/Apr/2017 13:49:38 [Redis.cpp:109] Successfully connected to redis
127.0.0.1:6379@0
11/Apr/2017 13:49:38 [NtopPro.cpp:123] [LICENSE] Read license from Redis
[340E0F41BFFCA1D701CE32A63B5536CE15229460838F4CA0C0]
11/Apr/2017 13:49:38 [main.cpp:137] System has 1 CPU cores
11/Apr/2017 13:49:38 [MySQLDB.cpp:582] Attempting to connect to MySQL
for interface tcp://127.0.0.1:5556...
11/Apr/2017 13:49:38 [MySQLDB.cpp:622] Successfully connected to MySQL
[localhost:ntop] for interface tcp://127.0.0.1:5556
11/Apr/2017 13:49:38 [Utils.cpp:1454] Unable to read MTU for device
tcp://127.0.0.1:5556
11/Apr/2017 13:49:38 [Ntop.cpp:1419] Registered interface
tcp://127.0.0.1:5556 [id: 0]
11/Apr/2017 13:49:38 [MySQLDB.cpp:582] Attempting to connect to MySQL
for interface tcp://127.0.0.1:5557...
11/Apr/2017 13:49:38 [MySQLDB.cpp:622] Successfully connected to MySQL
[localhost:ntop] for interface tcp://127.0.0.1:5557
11/Apr/2017 13:49:38 [Utils.cpp:1454] Unable to read MTU for device
/tcp://127.0.0.1:5557
11/Apr/2017 13:49:38 [Ntop.cpp:1419] Registered interface
tcp://127.0.0.1:5557 [id: 1]
11/Apr/2017 13:49:38 [main.cpp:250] PID stored in file /var/run/ntopng.pid
11/Apr/2017 13:49:38 [HTTPserver.cpp:723] Please read
https://github.com/ntop/ntopng/blob/dev/doc/README.SSL if you want to
enable SSL.
11/Apr/2017 13:49:38 [Utils.cpp:368] User changed to nobody
11/Apr/2017 13:49:38 [HTTPserver.cpp:769] Web server dirs
[/usr/share/ntopng/httpdocs][/usr/share/ntopng/scripts]
11/Apr/2017 13:49:38 [HTTPserver.cpp:772] HTTP server listening on
port(s) 3000
11/Apr/2017 13:49:38 [MySQLDB.cpp:582] Attempting to connect to MySQL
for interface tcp://127.0.0.1:5556...
11/Apr/2017 13:49:38 [MySQLDB.cpp:622] Successfully connected to MySQL
[localhost:ntop] for interface tcp://127.0.0.1:5556
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'CREATE
DATABASE IF NOT EXISTS `ntop`'
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'CREATE
TABLE IF NOT EXISTS `flowsv6` (`idx` int(11) NOT NULL
AUTO_INCREMENT,`VLAN_ID` smallint(5) unsigned DEFAULT NULL,`L7_PROTO`
smallint(5) unsigned DEFAULT NULL,`IP_SRC_ADDR` varchar(48) DEFAULT
NULL,`L4_SRC_PORT` smallint(5) unsigned DEFAULT NULL,`IP_DST_ADDR`
varchar(48) DEFAULT NULL,`L4_DST_PORT` smallint(5) unsigned DEFAULT
NULL,`PROTOCOL` tinyint(3) unsigned DEFAULT NULL,`BYTES` int(10)
unsigned DEFAULT NULL,`PACKETS` int(10) unsigned DEFAULT
NULL,`FIRST_SWITCHED` int(10) unsigned DEFAULT NULL,`LAST_SWITCHED`
int(10) unsigned DEFAULT NULL,`INFO` varchar(255) DEFAULT NULL,`JSON`
blob,`PROFILE` varchar(255) DEFAULT NULL,`NTOPNG_INSTANCE_NAME`
varchar(256) DEFAULT NULL,`INTERFACE` varchar(64) DEFAULT NULL,KEY `idx`
(`idx`,`IP_SRC_ADDR`,`IP_DST_ADDR`,`FIRST_SWITCHED`,`LAST_SWITCHED`,`INFO`(200)),KEY
`ix_flowsv6_4_profile` (`PROFILE`),KEY
`ix_flowsv6_4_ntopng_instance_name` (`NTOPNG_INSTANCE_NAME`(255)),KEY
`ix_flowsv6_4_ntopng_interface` (`INTERFACE`)) ENGINE=InnoDB
AUTO_INCREMENT=7 DEFAULT CHARSET=utf8/*!50100 PARTITION BY HASH
(`FIRST_SWITCHED`)PARTITIONS 32 */'
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'CREATE
TABLE IF NOT EXISTS `flowsv4` (`idx` int(11) NOT NULL
AUTO_INCREMENT,`VLAN_ID` smallint(5) unsigned DEFAULT NULL,`L7_PROTO`
smallint(5) unsigned DEFAULT NULL,`IP_SRC_ADDR` int(10) unsigned DEFAULT
NULL,`L4_SRC_PORT` smallint(5) unsigned DEFAULT NULL,`IP_DST_ADDR`
int(10) unsigned DEFAULT NULL,`L4_DST_PORT` smallint(5) unsigned DEFAULT
NULL,`PROTOCOL` tinyint(3) unsigned DEFAULT NULL,`BYTES` int(10)
unsigned DEFAULT NULL,`PACKETS` int(10) unsigned DEFAULT
NULL,`FIRST_SWITCHED` int(10) unsigned DEFAULT NULL,`LAST_SWITCHED`
int(10) unsigned DEFAULT NULL,`INFO` varchar(255) DEFAULT NULL,`JSON`
blob,`PROFILE` varchar(255) DEFAULT NULL,`NTOPNG_INSTANCE_NAME`
varchar(256) DEFAULT NULL,`INTERFACE` varchar(64) DEFAULT NULL,KEY `idx`
(`idx`,`IP_SRC_ADDR`,`IP_DST_ADDR`,`FIRST_SWITCHED`,`LAST_SWITCHED`,`INFO`(200)),KEY
`ix_flowsv4_4_profile` (`PROFILE`),KEY
`ix_flowsv4_4_ntopng_instance_name` (`NTOPNG_INSTANCE_NAME`(255)),KEY
`ix_flowsv4_4_ntopng_interface` (`INTERFACE`)) ENGINE=InnoDB
AUTO_INCREMENT=520 DEFAULT CHARSET=utf8/*!50100 PARTITION BY HASH
(`FIRST_SWITCHED`)PARTITIONS 32 */'
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv4_0' doesn't
exist][ALTER TABLE `flowsv4_0` ADD `INFO` varchar(255)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv6_0' doesn't
exist][ALTER TABLE `flowsv6_0` ADD `INFO` varchar(255)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv4_0' doesn't
exist][.ALTER TABLE `flowsv4_0` ADD `PROFILE` varchar(255) DEFAULT
NULL,ADD INDEX `ix_flowsv4_0_profile` (PROFILE)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv6_0' doesn't
exist][.ALTER TABLE `flowsv6_0` ADD `PROFILE` varchar(255) DEFAULT
NULL,ADD INDEX `ix_flowsv6_0_profile` (PROFILE)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv4_0' doesn't
exist][.ALTER TABLE `flowsv4_0` ADD `NTOPNG_INSTANCE_NAME` varchar(256)
DEFAULT NULL,ADD INDEX `ix_flowsv4_0_ntopng_instance_name`
(NTOPNG_INSTANCE_NAME)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv6_0' doesn't
exist][.ALTER TABLE `flowsv6_0` ADD `NTOPNG_INSTANCE_NAME` varchar(256)
DEFAULT NULL,ADD INDEX `ix_flowsv6_0_ntopng_instance_name`
(NTOPNG_INSTANCE_NAME)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv4_0' doesn't
exist][.ALTER TABLE `flowsv4_0` ADD `INTERFACE` varchar(64) DEFAULT
NULL,ADD INDEX `ix_flowsv4_0_ntopng_interface` (INTERFACE)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv6_0' doesn't
exist][.ALTER TABLE `flowsv6_0` ADD `INTERFACE` varchar(64) DEFAULT
NULL,ADD INDEX `ix_flowsv6_0_ntopng_interface` (INTERFACE)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv4_0' doesn't
exist][INSERT IGNORE INTO `flowsv4` SELECT * FROM `flowsv4_0`]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Table 'ntop.flowsv6_0' doesn't
exist][INSERT IGNORE INTO `flowsv6` SELECT * FROM `flowsv6_0`]
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'DROP TABLE
IF EXISTS `flowsv4_0` '
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'DROP TABLE
IF EXISTS `flowsv6_0` '
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Duplicate key name
'ix_flowsv4_ntopng_first_src_dst'][ALTER TABLE `flowsv4` ADD INDEX
`ix_flowsv4_ntopng_first_src_dst` (FIRST_SWITCHED, IP_SRC_ADDR,
IP_DST_ADDR)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Duplicate key name
'ix_flowsv6_ntopng_first_src_dst'][ALTER TABLE `flowsv6` ADD INDEX
`ix_flowsv6_ntopng_first_src_dst` (FIRST_SWITCHED, IP_SRC_ADDR,
IP_DST_ADDR)]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Duplicate column name
'INTERFACE_ID'][ALTER TABLE `flowsv4` ADD COLUMN INTERFACE_ID
SMALLINT(5) DEFAULT NULL]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Duplicate column name
'INTERFACE_ID'][ALTER TABLE `flowsv6` ADD COLUMN INTERFACE_ID
SMALLINT(5) DEFAULT NULL]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Unknown column 'INTERFACE' in
'where clause'][UPDATE `flowsv4` SET INTERFACE_ID = 0 WHERE INTERFACE
='tcp://127.0.0.1:5556']
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Unknown column 'INTERFACE' in
'where clause'][UPDATE `flowsv6` SET INTERFACE_ID = 0 WHERE INTERFACE
='tcp://127.0.0.1:5556']
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Unknown column 'INTERFACE' in
'where clause'][UPDATE `flowsv4` SET INTERFACE = NULL WHERE INTERFACE
='tcp://127.0.0.1:5556']
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Unknown column 'INTERFACE' in
'where clause'][UPDATE `flowsv6` SET INTERFACE = NULL WHERE INTERFACE
='tcp://127.0.0.1:5556']
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Unknown column 'INTERFACE' in
'where clause'][.SELECT 1 FROM `flowsv4` WHERE INTERFACE IS NOT NULL LIMIT 1]
11/Apr/2017 13:49:38 [MySQLDB.cpp:670] [Unknown column 'INTERFACE' in
'where clause'][.SELECT 1 FROM `flowsv6` WHERE INTERFACE IS NOT NULL LIMIT 1]
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.COLUMNS WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv4' AND COLUMN_NAME='BYTES' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.COLUMNS WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv6' AND COLUMN_NAME='BYTES' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.TABLES WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv4' AND ENGINE='InnoDB' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.TABLES WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv6' AND ENGINE='InnoDB' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.COLUMNS WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv4' AND COLUMN_NAME='IN_BYTES' AND COLUMN_TYPE NOT LIKE
'%UNSIGNED' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.COLUMNS WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv4' AND COLUMN_NAME='OUT_BYTES' AND COLUMN_TYPE NOT
LIKE '%UNSIGNED' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.COLUMNS WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv4' AND COLUMN_NAME='PACKETS' AND COLUMN_TYPE NOT LIKE
'%UNSIGNED' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.COLUMNS WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv6' AND COLUMN_NAME='IN_BYTES' AND COLUMN_TYPE NOT LIKE
'%UNSIGNED' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.COLUMNS WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv6' AND COLUMN_NAME='OUT_BYTES' AND COLUMN_TYPE NOT
LIKE '%UNSIGNED' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [MySQLDB.cpp:676] Successfully executed 'SELECT 1
FROM information_schema.COLUMNS WHERE TABLE_SCHEMA='ntop' AND
TABLE_NAME='flowsv6' AND COLUMN_NAME='PACKETS' AND COLUMN_TYPE NOT LIKE
'%UNSIGNED' '
11/Apr/2017 13:49:38 [MySQLDB.cpp:683] Current result set has 0 rows
11/Apr/2017 13:49:38 [main.cpp:311] Working directory: /var/tmp/ntopng
11/Apr/2017 13:49:38 [main.cpp:313] Scripts/HTML pages directory:
/usr/share/ntopng
11/Apr/2017 13:49:38 [Ntop.cpp:292] Welcome to ntopng x86_64
v.2.5.170410 - (C) 1998-17 ntop.org
11/Apr/2017 13:49:38 [Ntop.cpp:297] Built on Debian GNU/Linux 8.2 (jessie)
11/Apr/2017 13:49:38 [PeriodicActivities.cpp:56] Started periodic
activities loop...
11/Apr/2017 13:49:38 [PeriodicActivities.cpp:97] Starting script
/usr/share/ntopng/scripts/callbacks/startup.lua
11/Apr/2017 13:49:38 [Lua.cpp:112] NULL interface: did you restart
ntopng in the meantime?
11/Apr/2017 13:49:39 [MySQLDB.cpp:582] Attempting to connect to MySQL
for interface tcp://127.0.0.1:5557...
11/Apr/2017 13:49:39 [MySQLDB.cpp:582] Attempting to connect to MySQL
for interface tcp://127.0.0.1:5556...
11/Apr/2017 13:49:39 [MySQLDB.cpp:622] Successfully connected to MySQL
[localhost:ntop] for interface tcp://127.0.0.1:5556
11/Apr/2017 13:49:39 [MySQLDB.cpp:622] Successfully connected to MySQL
[localhost:ntop] for interface tcp://127.0.0.1:5557
11/Apr/2017 13:49:39 [HTTPserver.cpp:620] [HTTP] /lua/network_load.lua
[/usr/share/ntopng/scripts/lua/network_load.lua]
11/Apr/2017 13:49:39 [HTTPserver.cpp:620] [HTTP] /lua/network_load.lua
[/usr/share/ntopng/scripts/lua/network_load.lua]
11/Apr/2017 13:49:39 [Lua.cpp:112] NULL interface: did you restart
ntopng in the meantime?
11/Apr/2017 13:49:39 [Lua.cpp:112] NULL interface: did you restart
ntopng in the meantime?
11/Apr/2017 13:49:39 [Ntop.cpp:1485] Loading blacklist 101.187.28.8
11/Apr/2017 13:49:39 [Ntop.cpp:1485] Loading blacklist 103.13.29.158
...
...
...
11/Apr/2017 13:49:39 [Ntop.cpp:1485] Loading blacklist 103.16.26.228
11/Apr/2017 13:49:39 [Ntop.cpp:1485] Loading blacklist 106.75.18.0/24
11/Apr/2017 13:49:39 [Ntop.cpp:1485] Loading blacklist 93.174.95.0/24
11/Apr/2017 13:49:39 [NtopPro.cpp:268] [LICENSE] ntopng systemId:
9C3A8E0D00001090
11/Apr/2017 13:49:39 [NtopPro.cpp:279] [LICENSE] ntopng license:
340E0F41BFFCA1D701CE32A63B5536CE15229460838F4CA0C0
11/Apr/2017 13:49:39 [NtopPro.cpp:300] [LICENSE] Maintenance is
available until Thu Apr 5 18:34:43 2018 [359 days left]
11/Apr/2017 13:49:39 [Ntop.cpp:612] Local Interface Addresses (System Host)
11/Apr/2017 13:49:39 [Ntop.cpp:614] Local Networks
11/Apr/2017 13:49:39 [AddressTree.cpp:171] [AddressTree] ....
11/Apr/2017 13:49:39 [AddressTree.cpp:171] [AddressTree] ....
11/Apr/2017 13:49:39 [AddressTree.cpp:171] [AddressTree] ....
11/Apr/2017 13:49:39 [AddressTree.cpp:171] [AddressTree] ....
11/Apr/2017 13:49:39 [AddressTree.cpp:171] [AddressTree] ....
11/Apr/2017 13:49:39 [AddressTree.cpp:171] [AddressTree] ....
11/Apr/2017 13:49:39 [NetworkInterface.cpp:1931] Started packet polling
on interface tcp://127.0.0.1:5556 [id: 0]...
11/Apr/2017 13:49:39 [NetworkInterface.cpp:1931] Started packet polling
on interface tcp://127.0.0.1:5557 [id: 1]...
11/Apr/2017 13:49:39 [CollectorInterface.cpp:115] Collecting flows on
tcp://127.0.0.1:5556
11/Apr/2017 13:49:39 [CollectorInterface.cpp:115] Collecting flows on
tcp://127.0.0.1:5557
11/Apr/2017 13:49:39 [CollectorInterface.cpp:210] { "if.name": "none",
"if.speed": 1000, "if.ip": "", "probe.ip": "192.168.100.21",
"probe.public_ip": "", "time" : 1491911378.329, "bytes": 0, "packets":
0, "avg.bps": 0, "avg.pps": 0 } [msg_id=118]
11/Apr/2017 13:49:39 [CollectorInterface.cpp:210] { "if.name": "none",
"if.speed": 1000, "if.ip": "", "probe.ip": "192.168.100.21",
"probe.public_ip": "", "time" : 1491911378.356, "bytes": 0, "packets":
0, "avg.bps": 0, "avg.pps": 0 } [msg_id=118]
11/Apr/2017 13:49:39 [CollectorInterface.cpp:210] { "if.name": "none",
"if.speed": 1000, "if.ip": "", "probe.ip": "192.168.100.21",
"probe.public_ip": "", "time" : 1491911379.330, "bytes": 0, "packets":
0, "avg.bps": 0, "avg.pps": 0 } [msg_id=119]
11/Apr/2017 13:49:39 [CollectorInterface.cpp:210] { "if.name": "none",
"if.speed": 1000, "if.ip": "", "probe.ip": "192.168.100.21",
"probe.public_ip": "", "time" : 1491911379.356, "bytes": 0, "packets":
0, "avg.bps": 0, "avg.pps": 0 } [msg_id=119]
11/Apr/2017 13:49:39 [PeriodicActivities.cpp:97] Starting script
/usr/share/ntopng/scripts/callbacks/second.lua
11/Apr/2017 13:49:39 [PeriodicActivities.cpp:97] Starting script
/usr/share/ntopng/scripts/callbacks/housekeeping.lua
11/Apr/2017 13:49:39 [Lua.cpp:112] NULL interface: did you restart
ntopng in the meantime?
11/Apr/2017 13:49:39 [Lua.cpp:112] NULL interface: did you restart
ntopng in the meantime?
11/Apr/2017 13:49:40 [HTTPserver.cpp:620] [HTTP]
/lua/iface_local_stats.lua
[/usr/share/ntopng/scripts/lua/iface_local_stats.lua]
11/Apr/2017 13:49:40 [CollectorInterface.cpp:210] { "if.name": "none",
"if.speed": 1000, "if.ip": "", "probe.ip": "192.168.100.21",
"probe.public_ip": "", "time" : 1491911380.330, "bytes": 0, "packets":
0, "avg.bps": 0, "avg.pps": 0 } [msg_id=120]
11/Apr/2017 13:49:40 [CollectorInterface.cpp:210] { "if.name": "none",
"if.speed": 1000, "if.ip": "", "probe.ip": "192.168.100.21",
"probe.public_ip": "", "time" : 1491911380.356, "bytes": 0, "packets":
0, "avg.bps": 0, "avg.pps": 0 } [msg_id=120]
11/Apr/2017 13:49:40 [PeriodicActivities.cpp:97] Starting script
/usr/share/ntopng/scripts/callbacks/second.lua
11/Apr/2017 13:49:40 [Lua.cpp:112] NULL interface: did you restart
ntopng in the meantime?
11/Apr/2017 13:49:41 [CollectorInterface.cpp:210] { "if.name": "none",
"if.speed": 1000, "if.ip": "", "probe.ip": "192.168.100.21",
"probe.public_ip": "", "time" : 1491911381.330, "bytes": 0, "packets":
0, "avg.bps": 0, "avg.pps": 0 } [msg_id=121]
11/Apr/2017 13:49:41 [CollectorInterface.cpp:210] { "if.name": "none",
"if.speed": 1000, "if.ip": "", "probe.ip": "192.168.100.21",
"probe.public_ip": "", "time" : 1491911381.357, "bytes": 0, "packets":
0, "avg.bps": 0, "avg.pps": 0 } [msg_id=121]
11/Apr/2017 13:49:41 [PeriodicActivities.cpp:97] Starting script
/usr/share/ntopng/scripts/callbacks/second.lua
11/Apr/2017 13:49:41 [Lua.cpp:112] NULL interface: did you restart
ntopng in the meantime?
11/Apr/2017 13:49:42 [HTTPserver.cpp:620] [HTTP] /lua/network_load.lua
[/usr/share/ntopng/scripts/lua/network_load.lua]
11/Apr/2017 13:49:42 [HTTPserver.cpp:620] [HTTP] /lua/network_load.lua
[/usr/share/ntopng/scripts/lua/network_load.lua]

repeats the last patrs for ever ...


--

MHC SoftWare GmbH
Fichtera 17
96274 Itzgrund/Germany

voice: +49-(0)9533-92006-0
fax: +49-(0)9533-92006-6
e-mail: info@mhcsoftware.de

HR Coburg: B2242
Geschaeftsfuehrer: Matthias Henze



_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop