Mailing List Archive: netflow + ntop on BGP

netflow + ntop on BGP

Feb 4, 2018, 6:12 AM

Post #1 of 3 (553 views)

Hello,

Is there any documentation for this ?

I am using Cisco ASR 1001-X and already setup flow exporter, record and
monitor in my router. On other side ntop + nprobe also setup. Now, I
only saw only one flow from router to ntop+nprobe machine for example
a.b.c.d:port => x.x.x.x:2055 (Netflow).

--
Sincerely,
Joni Lee
Office: +886(4)2311-7977
Mobile: +886-970-576-524
HostingInside LTD. / ???????? / AS134522
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

Re: netflow + ntop on BGP [ In reply to ]

mainardi at ntop

Feb 5, 2018, 1:16 AM

Post #2 of 3 (553 views)

Permalink

Hello,

Very likely you are monitoring plain NetFlow traffic without interpreting its contents. Please, refer to this resource for proper setup: https://www.ntop.org/nprobe/why-nprobejsonzmq-instead-of-native-sflownetflow-support-in-ntopng/ <https://www.ntop.org/nprobe/why-nprobejsonzmq-instead-of-native-sflownetflow-support-in-ntopng/>

Simone

> On 4 Feb 2018, at 15:12, Joni Lee <nokoya@hostinginside.com> wrote:
>
> Hello,
>
> Is there any documentation for this ?
>
> I am using Cisco ASR 1001-X and already setup flow exporter, record and monitor in my router. On other side ntop + nprobe also setup. Now, I only saw only one flow from router to ntop+nprobe machine for example a.b.c.d:port => x.x.x.x:2055 (Netflow).
>
> --
> Sincerely,
> Joni Lee
> Office: +886(4)2311-7977
> Mobile: +886-970-576-524
> HostingInside LTD. / ???????? / AS134522
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop