Mailing List Archive

nprobe not opening --bgp-port
Hi,

Trying to use the BGP plugin, but seems nprobe isn’t opening the specified BGP port. Something I’m missing?

#nprobe.conf
-b=2
-i=none
-n=none
-3=2055
--zmq=tcp://127.0.0.1:5556
-T="@NTOPNG@ %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
-S=1:1000:1
-I=nprobe
--bgp-port=4096

root@ntop:/tmp# ss -tupan | grep nprobe
udp UNCONN 0 0 *:2055 *:* users:(("nprobe",pid=1850,fd=5))
udp UNCONN 0 0 :::2055 :::* users:(("nprobe",pid=1850,fd=14))
tcp LISTEN 0 100 127.0.0.1:5556 *:* users:(("nprobe",pid=1850,fd=13))
tcp ESTAB 0 0 127.0.0.1:5556 127.0.0.1:36098 users:(("nprobe",pid=1850,fd=16))
root@ntop:/tmp#

# systemctl start nprobe
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin FTP Protocol [/etc/nprobe.license.ftp]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv0 Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv1 Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv2 Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin HTTP Protocol [/etc/nprobe.license.http]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin IMAP Protocol [/etc/nprobe.license.email]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Netflow-Lite Plugin [/etc/nprobe.license.nflite]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Oracle Protocol [/etc/nprobe.license.oracle]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin POP3 Protocol [/etc/nprobe.license.email]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Radius Protocol [/etc/nprobe.license.radius]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin RTP Plugin [/etc/nprobe.license.voip]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin S1AP Protocol [/etc/nprobe.license.S1AP]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SIP Plugin [/etc/nprobe.license.voip]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SMTP Protocol [/etc/nprobe.license.email]: Missing license file
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:4164] Valid nProbe Pro license found
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6086] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ?
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6089] WARNING: The input interfaceId is set to 0: did you forget to use -u perhaps ?
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6176] Welcome to nProbe Pro v.8.6.190214 ($Revision: 6317 $) for x86_64-pc-linux-gnu with native PF_RING acceleration
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6186] Running on Debian GNU/Linux 9.1 (stretch)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6197] [LICENSE] nProbe SystemId: 3B37D43876076B20
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6201] Tracing enabled
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6264] Sample rate [packet: 1][flow collection/export: 1000/1]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8956] Welcome to nProbe v.8.6.190214 for x86_64-pc-linux-gnu
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7921] Compiling flow templates...
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7966] Using NetFlow Packet Payload Len: 1472
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7896] @NTOPNG@ expanded to " %L7_PROTO %IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_SRC_PORT %L4_DST_PORT %IPV6_SRC_ADDR %IPV6_DST_ADDR %IP_PROTOCOL_VERSION %PROTOCOL %IN_BYTES %IN_PKTS %OUT_BYTES %OUT_PKTS %FIRST_SWITCHED %LAST_SWITCHED %SRC_VLAN %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_SRC_ADDR: skipping
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_DST_ADDR: skipping
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin BGP Update Listener [bgp]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1224] Enabling plugin BGP Update Listener
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL DB [db]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Export Plugin [export]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Modbus Plugin [modbus]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL Plugin [mysql]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin NETBIOS Protocol [netbios]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin SSDP Protocol [ssdp]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1238] 1 plugin(s) enabled
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8334] Scanning flow template...
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=257]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=258]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=259]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 25][id 290][4 bytes][total 74 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 26][id 291][4 bytes][total 78 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 27][id 292][4 bytes][total 82 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 28][id 293][4 bytes][total 86 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 29][id 294][4 bytes][total 90 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 30][id 295][4 bytes][total 94 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 31][id 296][4 bytes][total 98 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 32][id 297][4 bytes][total 102 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 33][id 298][4 bytes][total 106 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 34][id 299][4 bytes][total 110 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 35][id 300][4 bytes][total 114 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 36][id 301][4 bytes][total 118 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 37][id 302][4 bytes][total 122 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 38][id 303][4 bytes][total 126 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 39][id 304][4 bytes][total 130 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 40][id 305][4 bytes][total 134 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 41][id 306][4 bytes][total 138 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 42][id 307][4 bytes][total 142 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 43][id 308][4 bytes][total 146 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 44][id 309][4 bytes][total 150 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=260]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 23][id 290][4 bytes][total 120 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 24][id 291][4 bytes][total 124 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 25][id 292][4 bytes][total 128 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 26][id 293][4 bytes][total 132 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 27][id 294][4 bytes][total 136 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 28][id 295][4 bytes][total 140 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 29][id 296][4 bytes][total 144 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 30][id 297][4 bytes][total 148 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 31][id 298][4 bytes][total 152 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 32][id 299][4 bytes][total 156 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 33][id 300][4 bytes][total 160 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 34][id 301][4 bytes][total 164 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 35][id 302][4 bytes][total 168 bytes]
Feb 22 10:00:35 ntop influxd[738]: [httpd] ::1 - - [22/Feb/2019:10:00:35 -0500] "POST /write?db=ntopng HTTP/1.1" 204 0 "-" "-" 9b6a879c-36b2-11e9-826e-000c2934ce36 1498
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 36][id 303][4 bytes][total 172 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 37][id 304][4 bytes][total 176 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 38][id 305][4 bytes][total 180 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 39][id 306][4 bytes][total 184 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 40][id 307][4 bytes][total 188 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 41][id 308][4 bytes][total 192 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 42][id 309][4 bytes][total 196 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8374] Scanning option template...
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_FLOWS_EXP [id 42][4 bytes][total 4 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_PKTS_EXP [id 41][4 bytes][total 8 bytes]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8412] Each flow is 196 bytes long
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8413] The # flows per packet has been set to 6
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8416] IP TOS is accounted
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8442] Non IPv4/v6 traffic is discarded according to the template
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:507] Loaded database /usr/share/ntopng/httpdocs/geoip/GeoLite2-ASN.mmdb [ip_version: 6]
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9166] The flows hash has 131072 buckets
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9168] Flows older than 120 seconds will be exported
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9171] Flows inactive for at least 30 seconds will be exported
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9174] Expired flows will not be queued for more than 30 seconds
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9181] Exported flows with engineType 0 and engineId 147
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9249] Flows will be emitted in NetFlow 9 format
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9259] Collected flows sampled at 1:1000 rate
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9302] Flow input interface index is set to 0
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9308] Flow output interface index is set to 0
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9322] Not capturing packet from interface (collector mode)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4721] Initializing ZMQ as server
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4764] Succesfully created ZMQ endpoint tcp://127.0.0.1:5556
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:3790] nProbe changed user to 'nprobe'
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:933] Enabling plugin BGP Update Listener
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL DB (no template is using it)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Export Plugin (no template is using it)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Modbus Plugin (no template is using it)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL Plugin (no template is using it)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin NETBIOS Protocol (no template is using it)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin SSDP Protocol (no template is using it)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:83] Created UDP sockets
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:142] Flow collector listening on port 2055 (IPv4/v6)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9445] Starting 1 packet fetch thread(s)
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [engine.c:3721] Starting bucket dequeue thread
Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9568] nProbe started successfully


_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: nprobe not opening --bgp-port [ In reply to ]
Jason,

You need an auxiliary script that speaks BGP. Then nProbe will connect to it over the specified --bgp-port.

See https://www.ntop.org/guides/nProbe/plugins/bgp.html?highlight=bgp <https://www.ntop.org/guides/nProbe/plugins/bgp.html?highlight=bgp>

Regards,
Simone

> On 22 Feb 2019, at 16:18, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>
> Hi,
>
> Trying to use the BGP plugin, but seems nprobe isn’t opening the specified BGP port. Something I’m missing?
>
> #nprobe.conf
> -b=2
> -i=none
> -n=none
> -3=2055
> --zmq=tcp://127.0.0.1:5556
> -T="@NTOPNG@ %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
> -S=1:1000:1
> -I=nprobe
> --bgp-port=4096
>
> root@ntop:/tmp# ss -tupan | grep nprobe
> udp UNCONN 0 0 *:2055 *:* users:(("nprobe",pid=1850,fd=5))
> udp UNCONN 0 0 :::2055 :::* users:(("nprobe",pid=1850,fd=14))
> tcp LISTEN 0 100 127.0.0.1:5556 *:* users:(("nprobe",pid=1850,fd=13))
> tcp ESTAB 0 0 127.0.0.1:5556 127.0.0.1:36098 users:(("nprobe",pid=1850,fd=16))
> root@ntop:/tmp#
>
> # systemctl start nprobe
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin FTP Protocol [/etc/nprobe.license.ftp]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv0 Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv1 Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv2 Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin HTTP Protocol [/etc/nprobe.license.http]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin IMAP Protocol [/etc/nprobe.license.email]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Netflow-Lite Plugin [/etc/nprobe.license.nflite]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Oracle Protocol [/etc/nprobe.license.oracle]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin POP3 Protocol [/etc/nprobe.license.email]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Radius Protocol [/etc/nprobe.license.radius]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin RTP Plugin [/etc/nprobe.license.voip]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin S1AP Protocol [/etc/nprobe.license.S1AP]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SIP Plugin [/etc/nprobe.license.voip]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SMTP Protocol [/etc/nprobe.license.email]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:4164] Valid nProbe Pro license found
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6086] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ?
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6089] WARNING: The input interfaceId is set to 0: did you forget to use -u perhaps ?
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6176] Welcome to nProbe Pro v.8.6.190214 ($Revision: 6317 $) for x86_64-pc-linux-gnu with native PF_RING acceleration
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6186] Running on Debian GNU/Linux 9.1 (stretch)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6197] [LICENSE] nProbe SystemId: 3B37D43876076B20
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6201] Tracing enabled
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6264] Sample rate [packet: 1][flow collection/export: 1000/1]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8956] Welcome to nProbe v.8.6.190214 for x86_64-pc-linux-gnu
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7921] Compiling flow templates...
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7966] Using NetFlow Packet Payload Len: 1472
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7896] @NTOPNG@ expanded to " %L7_PROTO %IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_SRC_PORT %L4_DST_PORT %IPV6_SRC_ADDR %IPV6_DST_ADDR %IP_PROTOCOL_VERSION %PROTOCOL %IN_BYTES %IN_PKTS %OUT_BYTES %OUT_PKTS %FIRST_SWITCHED %LAST_SWITCHED %SRC_VLAN %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_SRC_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_DST_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin BGP Update Listener [bgp]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1224] Enabling plugin BGP Update Listener
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL DB [db]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Export Plugin [export]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Modbus Plugin [modbus]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL Plugin [mysql]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin NETBIOS Protocol [netbios]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin SSDP Protocol [ssdp]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1238] 1 plugin(s) enabled
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8334] Scanning flow template...
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=257]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=258]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=259]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 25][id 290][4 bytes][total 74 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 26][id 291][4 bytes][total 78 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 27][id 292][4 bytes][total 82 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 28][id 293][4 bytes][total 86 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 29][id 294][4 bytes][total 90 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 30][id 295][4 bytes][total 94 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 31][id 296][4 bytes][total 98 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 32][id 297][4 bytes][total 102 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 33][id 298][4 bytes][total 106 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 34][id 299][4 bytes][total 110 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 35][id 300][4 bytes][total 114 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 36][id 301][4 bytes][total 118 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 37][id 302][4 bytes][total 122 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 38][id 303][4 bytes][total 126 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 39][id 304][4 bytes][total 130 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 40][id 305][4 bytes][total 134 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 41][id 306][4 bytes][total 138 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 42][id 307][4 bytes][total 142 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 43][id 308][4 bytes][total 146 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 44][id 309][4 bytes][total 150 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=260]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 23][id 290][4 bytes][total 120 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 24][id 291][4 bytes][total 124 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 25][id 292][4 bytes][total 128 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 26][id 293][4 bytes][total 132 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 27][id 294][4 bytes][total 136 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 28][id 295][4 bytes][total 140 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 29][id 296][4 bytes][total 144 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 30][id 297][4 bytes][total 148 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 31][id 298][4 bytes][total 152 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 32][id 299][4 bytes][total 156 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 33][id 300][4 bytes][total 160 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 34][id 301][4 bytes][total 164 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 35][id 302][4 bytes][total 168 bytes]
> Feb 22 10:00:35 ntop influxd[738]: [httpd] ::1 - - [22/Feb/2019:10:00:35 -0500] "POST /write?db=ntopng HTTP/1.1" 204 0 "-" "-" 9b6a879c-36b2-11e9-826e-000c2934ce36 1498
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 36][id 303][4 bytes][total 172 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 37][id 304][4 bytes][total 176 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 38][id 305][4 bytes][total 180 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 39][id 306][4 bytes][total 184 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 40][id 307][4 bytes][total 188 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 41][id 308][4 bytes][total 192 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 42][id 309][4 bytes][total 196 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8374] Scanning option template...
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_FLOWS_EXP [id 42][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_PKTS_EXP [id 41][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8412] Each flow is 196 bytes long
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8413] The # flows per packet has been set to 6
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8416] IP TOS is accounted
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8442] Non IPv4/v6 traffic is discarded according to the template
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:507] Loaded database /usr/share/ntopng/httpdocs/geoip/GeoLite2-ASN.mmdb [ip_version: 6]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9166] The flows hash has 131072 buckets
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9168] Flows older than 120 seconds will be exported
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9171] Flows inactive for at least 30 seconds will be exported
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9174] Expired flows will not be queued for more than 30 seconds
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9181] Exported flows with engineType 0 and engineId 147
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9249] Flows will be emitted in NetFlow 9 format
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9259] Collected flows sampled at 1:1000 rate
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9302] Flow input interface index is set to 0
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9308] Flow output interface index is set to 0
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9322] Not capturing packet from interface (collector mode)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4721] Initializing ZMQ as server
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4764] Succesfully created ZMQ endpoint tcp://127.0.0.1:5556
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:3790] nProbe changed user to 'nprobe'
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:933] Enabling plugin BGP Update Listener
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL DB (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Export Plugin (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Modbus Plugin (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL Plugin (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin NETBIOS Protocol (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin SSDP Protocol (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:83] Created UDP sockets
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:142] Flow collector listening on port 2055 (IPv4/v6)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9445] Starting 1 packet fetch thread(s)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [engine.c:3721] Starting bucket dequeue thread
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9568] nProbe started successfully
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
Re: nprobe not opening --bgp-port [ In reply to ]
Jason,

You need an auxiliary script that speaks BGP. Then nProbe will connect to it over the specified --bgp-port.

See https://www.ntop.org/guides/nProbe/plugins/bgp.html?highlight=bgp <https://www.ntop.org/guides/nProbe/plugins/bgp.html?highlight=bgp>

Regards,
Simone

> On 22 Feb 2019, at 16:18, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>
> Hi,
>
> Trying to use the BGP plugin, but seems nprobe isn’t opening the specified BGP port. Something I’m missing?
>
> #nprobe.conf
> -b=2
> -i=none
> -n=none
> -3=2055
> --zmq=tcp://127.0.0.1:5556
> -T="@NTOPNG@ %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
> -S=1:1000:1
> -I=nprobe
> --bgp-port=4096
>
> root@ntop:/tmp# ss -tupan | grep nprobe
> udp UNCONN 0 0 *:2055 *:* users:(("nprobe",pid=1850,fd=5))
> udp UNCONN 0 0 :::2055 :::* users:(("nprobe",pid=1850,fd=14))
> tcp LISTEN 0 100 127.0.0.1:5556 *:* users:(("nprobe",pid=1850,fd=13))
> tcp ESTAB 0 0 127.0.0.1:5556 127.0.0.1:36098 users:(("nprobe",pid=1850,fd=16))
> root@ntop:/tmp#
>
> # systemctl start nprobe
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin FTP Protocol [/etc/nprobe.license.ftp]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv0 Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv1 Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv2 Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin HTTP Protocol [/etc/nprobe.license.http]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin IMAP Protocol [/etc/nprobe.license.email]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Netflow-Lite Plugin [/etc/nprobe.license.nflite]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Oracle Protocol [/etc/nprobe.license.oracle]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin POP3 Protocol [/etc/nprobe.license.email]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Radius Protocol [/etc/nprobe.license.radius]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin RTP Plugin [/etc/nprobe.license.voip]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin S1AP Protocol [/etc/nprobe.license.S1AP]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SIP Plugin [/etc/nprobe.license.voip]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SMTP Protocol [/etc/nprobe.license.email]: Missing license file
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:4164] Valid nProbe Pro license found
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6086] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ?
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6089] WARNING: The input interfaceId is set to 0: did you forget to use -u perhaps ?
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6176] Welcome to nProbe Pro v.8.6.190214 ($Revision: 6317 $) for x86_64-pc-linux-gnu with native PF_RING acceleration
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6186] Running on Debian GNU/Linux 9.1 (stretch)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6197] [LICENSE] nProbe SystemId: 3B37D43876076B20
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6201] Tracing enabled
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6264] Sample rate [packet: 1][flow collection/export: 1000/1]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8956] Welcome to nProbe v.8.6.190214 for x86_64-pc-linux-gnu
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7921] Compiling flow templates...
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7966] Using NetFlow Packet Payload Len: 1472
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7896] @NTOPNG@ expanded to " %L7_PROTO %IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_SRC_PORT %L4_DST_PORT %IPV6_SRC_ADDR %IPV6_DST_ADDR %IP_PROTOCOL_VERSION %PROTOCOL %IN_BYTES %IN_PKTS %OUT_BYTES %OUT_PKTS %FIRST_SWITCHED %LAST_SWITCHED %SRC_VLAN %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_SRC_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_DST_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin BGP Update Listener [bgp]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1224] Enabling plugin BGP Update Listener
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL DB [db]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Export Plugin [export]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Modbus Plugin [modbus]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL Plugin [mysql]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin NETBIOS Protocol [netbios]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin SSDP Protocol [ssdp]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1238] 1 plugin(s) enabled
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8334] Scanning flow template...
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=257]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=258]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=259]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 25][id 290][4 bytes][total 74 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 26][id 291][4 bytes][total 78 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 27][id 292][4 bytes][total 82 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 28][id 293][4 bytes][total 86 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 29][id 294][4 bytes][total 90 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 30][id 295][4 bytes][total 94 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 31][id 296][4 bytes][total 98 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 32][id 297][4 bytes][total 102 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 33][id 298][4 bytes][total 106 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 34][id 299][4 bytes][total 110 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 35][id 300][4 bytes][total 114 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 36][id 301][4 bytes][total 118 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 37][id 302][4 bytes][total 122 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 38][id 303][4 bytes][total 126 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 39][id 304][4 bytes][total 130 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 40][id 305][4 bytes][total 134 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 41][id 306][4 bytes][total 138 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 42][id 307][4 bytes][total 142 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 43][id 308][4 bytes][total 146 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 44][id 309][4 bytes][total 150 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=260]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 23][id 290][4 bytes][total 120 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 24][id 291][4 bytes][total 124 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 25][id 292][4 bytes][total 128 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 26][id 293][4 bytes][total 132 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 27][id 294][4 bytes][total 136 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 28][id 295][4 bytes][total 140 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 29][id 296][4 bytes][total 144 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 30][id 297][4 bytes][total 148 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 31][id 298][4 bytes][total 152 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 32][id 299][4 bytes][total 156 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 33][id 300][4 bytes][total 160 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 34][id 301][4 bytes][total 164 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 35][id 302][4 bytes][total 168 bytes]
> Feb 22 10:00:35 ntop influxd[738]: [httpd] ::1 - - [22/Feb/2019:10:00:35 -0500] "POST /write?db=ntopng HTTP/1.1" 204 0 "-" "-" 9b6a879c-36b2-11e9-826e-000c2934ce36 1498
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 36][id 303][4 bytes][total 172 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 37][id 304][4 bytes][total 176 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 38][id 305][4 bytes][total 180 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 39][id 306][4 bytes][total 184 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 40][id 307][4 bytes][total 188 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 41][id 308][4 bytes][total 192 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 42][id 309][4 bytes][total 196 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8374] Scanning option template...
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_FLOWS_EXP [id 42][4 bytes][total 4 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_PKTS_EXP [id 41][4 bytes][total 8 bytes]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8412] Each flow is 196 bytes long
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8413] The # flows per packet has been set to 6
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8416] IP TOS is accounted
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8442] Non IPv4/v6 traffic is discarded according to the template
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:507] Loaded database /usr/share/ntopng/httpdocs/geoip/GeoLite2-ASN.mmdb [ip_version: 6]
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9166] The flows hash has 131072 buckets
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9168] Flows older than 120 seconds will be exported
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9171] Flows inactive for at least 30 seconds will be exported
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9174] Expired flows will not be queued for more than 30 seconds
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9181] Exported flows with engineType 0 and engineId 147
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9249] Flows will be emitted in NetFlow 9 format
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9259] Collected flows sampled at 1:1000 rate
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9302] Flow input interface index is set to 0
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9308] Flow output interface index is set to 0
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9322] Not capturing packet from interface (collector mode)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4721] Initializing ZMQ as server
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4764] Succesfully created ZMQ endpoint tcp://127.0.0.1:5556
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:3790] nProbe changed user to 'nprobe'
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:933] Enabling plugin BGP Update Listener
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL DB (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Export Plugin (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Modbus Plugin (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL Plugin (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin NETBIOS Protocol (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin SSDP Protocol (no template is using it)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:83] Created UDP sockets
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:142] Flow collector listening on port 2055 (IPv4/v6)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9445] Starting 1 packet fetch thread(s)
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [engine.c:3721] Starting bucket dequeue thread
> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9568] nProbe started successfully
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
Re: nprobe not opening --bgp-port [ In reply to ]
Hi Simone,

If you’re talking about the BGP client script:

https://github.com/ntop/nProbe/blob/master/bgp/bgp_probe_client.pl

The script is already running, and a session is established between it and my router.

The script produces the following error every second:

Couldn't connect to :4096 : IO::Socket::INET: connect: Connection refused

> On Feb 24, 2019, at 5:38 PM, Simone Mainardi <mainardi@ntop.org> wrote:
>
> Jason,
>
> You need an auxiliary script that speaks BGP. Then nProbe will connect to it over the specified --bgp-port.
>
> See https://www.ntop.org/guides/nProbe/plugins/bgp.html?highlight=bgp
>
> Regards,
> Simone
>
>> On 22 Feb 2019, at 16:18, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>>
>> Hi,
>>
>> Trying to use the BGP plugin, but seems nprobe isn’t opening the specified BGP port. Something I’m missing?
>>
>> #nprobe.conf
>> -b=2
>> -i=none
>> -n=none
>> -3=2055
>> --zmq=tcp://127.0.0.1:5556
>> -T="@NTOPNG@ %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
>> -S=1:1000:1
>> -I=nprobe
>> --bgp-port=4096
>>
>> root@ntop:/tmp# ss -tupan | grep nprobe
>> udp UNCONN 0 0 *:2055 *:* users:(("nprobe",pid=1850,fd=5))
>> udp UNCONN 0 0 :::2055 :::* users:(("nprobe",pid=1850,fd=14))
>> tcp LISTEN 0 100 127.0.0.1:5556 *:* users:(("nprobe",pid=1850,fd=13))
>> tcp ESTAB 0 0 127.0.0.1:5556 127.0.0.1:36098 users:(("nprobe",pid=1850,fd=16))
>> root@ntop:/tmp#
>>
>> # systemctl start nprobe
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin FTP Protocol [/etc/nprobe.license.ftp]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv0 Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv1 Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv2 Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin HTTP Protocol [/etc/nprobe.license.http]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin IMAP Protocol [/etc/nprobe.license.email]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Netflow-Lite Plugin [/etc/nprobe.license.nflite]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Oracle Protocol [/etc/nprobe.license.oracle]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin POP3 Protocol [/etc/nprobe.license.email]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Radius Protocol [/etc/nprobe.license.radius]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin RTP Plugin [/etc/nprobe.license.voip]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin S1AP Protocol [/etc/nprobe.license.S1AP]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SIP Plugin [/etc/nprobe.license.voip]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SMTP Protocol [/etc/nprobe.license.email]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:4164] Valid nProbe Pro license found
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6086] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ?
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6089] WARNING: The input interfaceId is set to 0: did you forget to use -u perhaps ?
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6176] Welcome to nProbe Pro v.8.6.190214 ($Revision: 6317 $) for x86_64-pc-linux-gnu with native PF_RING acceleration
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6186] Running on Debian GNU/Linux 9.1 (stretch)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6197] [LICENSE] nProbe SystemId: 3B37D43876076B20
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6201] Tracing enabled
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6264] Sample rate [packet: 1][flow collection/export: 1000/1]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8956] Welcome to nProbe v.8.6.190214 for x86_64-pc-linux-gnu
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7921] Compiling flow templates...
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7966] Using NetFlow Packet Payload Len: 1472
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7896] @NTOPNG@ expanded to " %L7_PROTO %IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_SRC_PORT %L4_DST_PORT %IPV6_SRC_ADDR %IPV6_DST_ADDR %IP_PROTOCOL_VERSION %PROTOCOL %IN_BYTES %IN_PKTS %OUT_BYTES %OUT_PKTS %FIRST_SWITCHED %LAST_SWITCHED %SRC_VLAN %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_SRC_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_DST_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin BGP Update Listener [bgp]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1224] Enabling plugin BGP Update Listener
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL DB [db]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Export Plugin [export]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Modbus Plugin [modbus]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL Plugin [mysql]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin NETBIOS Protocol [netbios]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin SSDP Protocol [ssdp]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1238] 1 plugin(s) enabled
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8334] Scanning flow template...
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=257]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=258]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=259]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 25][id 290][4 bytes][total 74 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 26][id 291][4 bytes][total 78 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 27][id 292][4 bytes][total 82 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 28][id 293][4 bytes][total 86 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 29][id 294][4 bytes][total 90 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 30][id 295][4 bytes][total 94 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 31][id 296][4 bytes][total 98 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 32][id 297][4 bytes][total 102 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 33][id 298][4 bytes][total 106 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 34][id 299][4 bytes][total 110 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 35][id 300][4 bytes][total 114 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 36][id 301][4 bytes][total 118 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 37][id 302][4 bytes][total 122 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 38][id 303][4 bytes][total 126 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 39][id 304][4 bytes][total 130 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 40][id 305][4 bytes][total 134 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 41][id 306][4 bytes][total 138 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 42][id 307][4 bytes][total 142 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 43][id 308][4 bytes][total 146 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 44][id 309][4 bytes][total 150 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=260]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 23][id 290][4 bytes][total 120 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 24][id 291][4 bytes][total 124 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 25][id 292][4 bytes][total 128 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 26][id 293][4 bytes][total 132 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 27][id 294][4 bytes][total 136 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 28][id 295][4 bytes][total 140 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 29][id 296][4 bytes][total 144 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 30][id 297][4 bytes][total 148 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 31][id 298][4 bytes][total 152 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 32][id 299][4 bytes][total 156 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 33][id 300][4 bytes][total 160 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 34][id 301][4 bytes][total 164 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 35][id 302][4 bytes][total 168 bytes]
>> Feb 22 10:00:35 ntop influxd[738]: [httpd] ::1 - - [22/Feb/2019:10:00:35 -0500] "POST /write?db=ntopng HTTP/1.1" 204 0 "-" "-" 9b6a879c-36b2-11e9-826e-000c2934ce36 1498
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 36][id 303][4 bytes][total 172 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 37][id 304][4 bytes][total 176 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 38][id 305][4 bytes][total 180 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 39][id 306][4 bytes][total 184 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 40][id 307][4 bytes][total 188 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 41][id 308][4 bytes][total 192 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 42][id 309][4 bytes][total 196 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8374] Scanning option template...
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_FLOWS_EXP [id 42][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_PKTS_EXP [id 41][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8412] Each flow is 196 bytes long
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8413] The # flows per packet has been set to 6
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8416] IP TOS is accounted
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8442] Non IPv4/v6 traffic is discarded according to the template
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:507] Loaded database /usr/share/ntopng/httpdocs/geoip/GeoLite2-ASN.mmdb [ip_version: 6]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9166] The flows hash has 131072 buckets
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9168] Flows older than 120 seconds will be exported
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9171] Flows inactive for at least 30 seconds will be exported
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9174] Expired flows will not be queued for more than 30 seconds
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9181] Exported flows with engineType 0 and engineId 147
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9249] Flows will be emitted in NetFlow 9 format
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9259] Collected flows sampled at 1:1000 rate
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9302] Flow input interface index is set to 0
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9308] Flow output interface index is set to 0
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9322] Not capturing packet from interface (collector mode)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4721] Initializing ZMQ as server
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4764] Succesfully created ZMQ endpoint tcp://127.0.0.1:5556
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:3790] nProbe changed user to 'nprobe'
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:933] Enabling plugin BGP Update Listener
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL DB (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Export Plugin (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Modbus Plugin (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL Plugin (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin NETBIOS Protocol (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin SSDP Protocol (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:83] Created UDP sockets
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:142] Flow collector listening on port 2055 (IPv4/v6)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9445] Starting 1 packet fetch thread(s)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [engine.c:3721] Starting bucket dequeue thread
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9568] nProbe started successfully
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: nprobe not opening --bgp-port [ In reply to ]
Hi Simone,

If you’re talking about the BGP client script:

https://github.com/ntop/nProbe/blob/master/bgp/bgp_probe_client.pl

The script is already running, and a session is established between it and my router.

The script produces the following error every second:

Couldn't connect to :4096 : IO::Socket::INET: connect: Connection refused

> On Feb 24, 2019, at 5:38 PM, Simone Mainardi <mainardi@ntop.org> wrote:
>
> Jason,
>
> You need an auxiliary script that speaks BGP. Then nProbe will connect to it over the specified --bgp-port.
>
> See https://www.ntop.org/guides/nProbe/plugins/bgp.html?highlight=bgp
>
> Regards,
> Simone
>
>> On 22 Feb 2019, at 16:18, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>>
>> Hi,
>>
>> Trying to use the BGP plugin, but seems nprobe isn’t opening the specified BGP port. Something I’m missing?
>>
>> #nprobe.conf
>> -b=2
>> -i=none
>> -n=none
>> -3=2055
>> --zmq=tcp://127.0.0.1:5556
>> -T="@NTOPNG@ %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
>> -S=1:1000:1
>> -I=nprobe
>> --bgp-port=4096
>>
>> root@ntop:/tmp# ss -tupan | grep nprobe
>> udp UNCONN 0 0 *:2055 *:* users:(("nprobe",pid=1850,fd=5))
>> udp UNCONN 0 0 :::2055 :::* users:(("nprobe",pid=1850,fd=14))
>> tcp LISTEN 0 100 127.0.0.1:5556 *:* users:(("nprobe",pid=1850,fd=13))
>> tcp ESTAB 0 0 127.0.0.1:5556 127.0.0.1:36098 users:(("nprobe",pid=1850,fd=16))
>> root@ntop:/tmp#
>>
>> # systemctl start nprobe
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin FTP Protocol [/etc/nprobe.license.ftp]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv0 Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv1 Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv2 Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin HTTP Protocol [/etc/nprobe.license.http]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin IMAP Protocol [/etc/nprobe.license.email]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Netflow-Lite Plugin [/etc/nprobe.license.nflite]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Oracle Protocol [/etc/nprobe.license.oracle]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin POP3 Protocol [/etc/nprobe.license.email]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Radius Protocol [/etc/nprobe.license.radius]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin RTP Plugin [/etc/nprobe.license.voip]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin S1AP Protocol [/etc/nprobe.license.S1AP]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SIP Plugin [/etc/nprobe.license.voip]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SMTP Protocol [/etc/nprobe.license.email]: Missing license file
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:4164] Valid nProbe Pro license found
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6086] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ?
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6089] WARNING: The input interfaceId is set to 0: did you forget to use -u perhaps ?
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6176] Welcome to nProbe Pro v.8.6.190214 ($Revision: 6317 $) for x86_64-pc-linux-gnu with native PF_RING acceleration
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6186] Running on Debian GNU/Linux 9.1 (stretch)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6197] [LICENSE] nProbe SystemId: 3B37D43876076B20
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6201] Tracing enabled
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6264] Sample rate [packet: 1][flow collection/export: 1000/1]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8956] Welcome to nProbe v.8.6.190214 for x86_64-pc-linux-gnu
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7921] Compiling flow templates...
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7966] Using NetFlow Packet Payload Len: 1472
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7896] @NTOPNG@ expanded to " %L7_PROTO %IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_SRC_PORT %L4_DST_PORT %IPV6_SRC_ADDR %IPV6_DST_ADDR %IP_PROTOCOL_VERSION %PROTOCOL %IN_BYTES %IN_PKTS %OUT_BYTES %OUT_PKTS %FIRST_SWITCHED %LAST_SWITCHED %SRC_VLAN %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_SRC_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_DST_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin BGP Update Listener [bgp]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1224] Enabling plugin BGP Update Listener
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL DB [db]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Export Plugin [export]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Modbus Plugin [modbus]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL Plugin [mysql]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin NETBIOS Protocol [netbios]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin SSDP Protocol [ssdp]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1238] 1 plugin(s) enabled
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8334] Scanning flow template...
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=257]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=258]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=259]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 25][id 290][4 bytes][total 74 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 26][id 291][4 bytes][total 78 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 27][id 292][4 bytes][total 82 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 28][id 293][4 bytes][total 86 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 29][id 294][4 bytes][total 90 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 30][id 295][4 bytes][total 94 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 31][id 296][4 bytes][total 98 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 32][id 297][4 bytes][total 102 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 33][id 298][4 bytes][total 106 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 34][id 299][4 bytes][total 110 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 35][id 300][4 bytes][total 114 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 36][id 301][4 bytes][total 118 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 37][id 302][4 bytes][total 122 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 38][id 303][4 bytes][total 126 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 39][id 304][4 bytes][total 130 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 40][id 305][4 bytes][total 134 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 41][id 306][4 bytes][total 138 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 42][id 307][4 bytes][total 142 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 43][id 308][4 bytes][total 146 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 44][id 309][4 bytes][total 150 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=260]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 23][id 290][4 bytes][total 120 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 24][id 291][4 bytes][total 124 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 25][id 292][4 bytes][total 128 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 26][id 293][4 bytes][total 132 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 27][id 294][4 bytes][total 136 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 28][id 295][4 bytes][total 140 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 29][id 296][4 bytes][total 144 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 30][id 297][4 bytes][total 148 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 31][id 298][4 bytes][total 152 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 32][id 299][4 bytes][total 156 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 33][id 300][4 bytes][total 160 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 34][id 301][4 bytes][total 164 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 35][id 302][4 bytes][total 168 bytes]
>> Feb 22 10:00:35 ntop influxd[738]: [httpd] ::1 - - [22/Feb/2019:10:00:35 -0500] "POST /write?db=ntopng HTTP/1.1" 204 0 "-" "-" 9b6a879c-36b2-11e9-826e-000c2934ce36 1498
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 36][id 303][4 bytes][total 172 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 37][id 304][4 bytes][total 176 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 38][id 305][4 bytes][total 180 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 39][id 306][4 bytes][total 184 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 40][id 307][4 bytes][total 188 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 41][id 308][4 bytes][total 192 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 42][id 309][4 bytes][total 196 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8374] Scanning option template...
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_FLOWS_EXP [id 42][4 bytes][total 4 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_PKTS_EXP [id 41][4 bytes][total 8 bytes]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8412] Each flow is 196 bytes long
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8413] The # flows per packet has been set to 6
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8416] IP TOS is accounted
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8442] Non IPv4/v6 traffic is discarded according to the template
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:507] Loaded database /usr/share/ntopng/httpdocs/geoip/GeoLite2-ASN.mmdb [ip_version: 6]
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9166] The flows hash has 131072 buckets
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9168] Flows older than 120 seconds will be exported
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9171] Flows inactive for at least 30 seconds will be exported
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9174] Expired flows will not be queued for more than 30 seconds
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9181] Exported flows with engineType 0 and engineId 147
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9249] Flows will be emitted in NetFlow 9 format
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9259] Collected flows sampled at 1:1000 rate
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9302] Flow input interface index is set to 0
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9308] Flow output interface index is set to 0
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9322] Not capturing packet from interface (collector mode)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4721] Initializing ZMQ as server
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4764] Succesfully created ZMQ endpoint tcp://127.0.0.1:5556
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:3790] nProbe changed user to 'nprobe'
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:933] Enabling plugin BGP Update Listener
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL DB (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Export Plugin (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Modbus Plugin (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL Plugin (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin NETBIOS Protocol (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin SSDP Protocol (no template is using it)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:83] Created UDP sockets
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:142] Flow collector listening on port 2055 (IPv4/v6)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9445] Starting 1 packet fetch thread(s)
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [engine.c:3721] Starting bucket dequeue thread
>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9568] nProbe started successfully
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: nprobe not opening --bgp-port [ In reply to ]
Hello Jason, thanks for reporting. I've made a fix as the BGP plugin was failing to start in collector mode (-3=2055). Please, hold on a couple of hours -- new builds are in progress -- and then upgrade to the latest nprobe 8.7.

Regards,
Simone

> On 25 Feb 2019, at 04:04, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>
> Hi Simone,
>
> If you’re talking about the BGP client script:
>
> https://github.com/ntop/nProbe/blob/master/bgp/bgp_probe_client.pl
>
> The script is already running, and a session is established between it and my router.
>
> The script produces the following error every second:
>
> Couldn't connect to :4096 : IO::Socket::INET: connect: Connection refused
>
>> On Feb 24, 2019, at 5:38 PM, Simone Mainardi <mainardi@ntop.org> wrote:
>>
>> Jason,
>>
>> You need an auxiliary script that speaks BGP. Then nProbe will connect to it over the specified --bgp-port.
>>
>> See https://www.ntop.org/guides/nProbe/plugins/bgp.html?highlight=bgp
>>
>> Regards,
>> Simone
>>
>>> On 22 Feb 2019, at 16:18, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>>>
>>> Hi,
>>>
>>> Trying to use the BGP plugin, but seems nprobe isn’t opening the specified BGP port. Something I’m missing?
>>>
>>> #nprobe.conf
>>> -b=2
>>> -i=none
>>> -n=none
>>> -3=2055
>>> --zmq=tcp://127.0.0.1:5556
>>> -T="@NTOPNG@ %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
>>> -S=1:1000:1
>>> -I=nprobe
>>> --bgp-port=4096
>>>
>>> root@ntop:/tmp# ss -tupan | grep nprobe
>>> udp UNCONN 0 0 *:2055 *:* users:(("nprobe",pid=1850,fd=5))
>>> udp UNCONN 0 0 :::2055 :::* users:(("nprobe",pid=1850,fd=14))
>>> tcp LISTEN 0 100 127.0.0.1:5556 *:* users:(("nprobe",pid=1850,fd=13))
>>> tcp ESTAB 0 0 127.0.0.1:5556 127.0.0.1:36098 users:(("nprobe",pid=1850,fd=16))
>>> root@ntop:/tmp#
>>>
>>> # systemctl start nprobe
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin FTP Protocol [/etc/nprobe.license.ftp]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv0 Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv1 Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv2 Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin HTTP Protocol [/etc/nprobe.license.http]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin IMAP Protocol [/etc/nprobe.license.email]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Netflow-Lite Plugin [/etc/nprobe.license.nflite]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Oracle Protocol [/etc/nprobe.license.oracle]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin POP3 Protocol [/etc/nprobe.license.email]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Radius Protocol [/etc/nprobe.license.radius]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin RTP Plugin [/etc/nprobe.license.voip]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin S1AP Protocol [/etc/nprobe.license.S1AP]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SIP Plugin [/etc/nprobe.license.voip]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SMTP Protocol [/etc/nprobe.license.email]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:4164] Valid nProbe Pro license found
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6086] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ?
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6089] WARNING: The input interfaceId is set to 0: did you forget to use -u perhaps ?
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6176] Welcome to nProbe Pro v.8.6.190214 ($Revision: 6317 $) for x86_64-pc-linux-gnu with native PF_RING acceleration
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6186] Running on Debian GNU/Linux 9.1 (stretch)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6197] [LICENSE] nProbe SystemId: 3B37D43876076B20
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6201] Tracing enabled
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6264] Sample rate [packet: 1][flow collection/export: 1000/1]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8956] Welcome to nProbe v.8.6.190214 for x86_64-pc-linux-gnu
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7921] Compiling flow templates...
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7966] Using NetFlow Packet Payload Len: 1472
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7896] @NTOPNG@ expanded to " %L7_PROTO %IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_SRC_PORT %L4_DST_PORT %IPV6_SRC_ADDR %IPV6_DST_ADDR %IP_PROTOCOL_VERSION %PROTOCOL %IN_BYTES %IN_PKTS %OUT_BYTES %OUT_PKTS %FIRST_SWITCHED %LAST_SWITCHED %SRC_VLAN %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_SRC_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_DST_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin BGP Update Listener [bgp]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1224] Enabling plugin BGP Update Listener
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL DB [db]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Export Plugin [export]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Modbus Plugin [modbus]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL Plugin [mysql]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin NETBIOS Protocol [netbios]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin SSDP Protocol [ssdp]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1238] 1 plugin(s) enabled
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8334] Scanning flow template...
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=257]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=258]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=259]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 25][id 290][4 bytes][total 74 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 26][id 291][4 bytes][total 78 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 27][id 292][4 bytes][total 82 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 28][id 293][4 bytes][total 86 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 29][id 294][4 bytes][total 90 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 30][id 295][4 bytes][total 94 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 31][id 296][4 bytes][total 98 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 32][id 297][4 bytes][total 102 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 33][id 298][4 bytes][total 106 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 34][id 299][4 bytes][total 110 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 35][id 300][4 bytes][total 114 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 36][id 301][4 bytes][total 118 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 37][id 302][4 bytes][total 122 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 38][id 303][4 bytes][total 126 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 39][id 304][4 bytes][total 130 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 40][id 305][4 bytes][total 134 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 41][id 306][4 bytes][total 138 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 42][id 307][4 bytes][total 142 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 43][id 308][4 bytes][total 146 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 44][id 309][4 bytes][total 150 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=260]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 23][id 290][4 bytes][total 120 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 24][id 291][4 bytes][total 124 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 25][id 292][4 bytes][total 128 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 26][id 293][4 bytes][total 132 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 27][id 294][4 bytes][total 136 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 28][id 295][4 bytes][total 140 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 29][id 296][4 bytes][total 144 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 30][id 297][4 bytes][total 148 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 31][id 298][4 bytes][total 152 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 32][id 299][4 bytes][total 156 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 33][id 300][4 bytes][total 160 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 34][id 301][4 bytes][total 164 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 35][id 302][4 bytes][total 168 bytes]
>>> Feb 22 10:00:35 ntop influxd[738]: [httpd] ::1 - - [22/Feb/2019:10:00:35 -0500] "POST /write?db=ntopng HTTP/1.1" 204 0 "-" "-" 9b6a879c-36b2-11e9-826e-000c2934ce36 1498
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 36][id 303][4 bytes][total 172 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 37][id 304][4 bytes][total 176 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 38][id 305][4 bytes][total 180 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 39][id 306][4 bytes][total 184 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 40][id 307][4 bytes][total 188 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 41][id 308][4 bytes][total 192 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 42][id 309][4 bytes][total 196 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8374] Scanning option template...
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_FLOWS_EXP [id 42][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_PKTS_EXP [id 41][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8412] Each flow is 196 bytes long
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8413] The # flows per packet has been set to 6
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8416] IP TOS is accounted
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8442] Non IPv4/v6 traffic is discarded according to the template
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:507] Loaded database /usr/share/ntopng/httpdocs/geoip/GeoLite2-ASN.mmdb [ip_version: 6]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9166] The flows hash has 131072 buckets
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9168] Flows older than 120 seconds will be exported
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9171] Flows inactive for at least 30 seconds will be exported
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9174] Expired flows will not be queued for more than 30 seconds
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9181] Exported flows with engineType 0 and engineId 147
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9249] Flows will be emitted in NetFlow 9 format
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9259] Collected flows sampled at 1:1000 rate
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9302] Flow input interface index is set to 0
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9308] Flow output interface index is set to 0
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9322] Not capturing packet from interface (collector mode)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4721] Initializing ZMQ as server
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4764] Succesfully created ZMQ endpoint tcp://127.0.0.1:5556
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:3790] nProbe changed user to 'nprobe'
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:933] Enabling plugin BGP Update Listener
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL DB (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Export Plugin (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Modbus Plugin (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL Plugin (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin NETBIOS Protocol (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin SSDP Protocol (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:83] Created UDP sockets
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:142] Flow collector listening on port 2055 (IPv4/v6)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9445] Starting 1 packet fetch thread(s)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [engine.c:3721] Starting bucket dequeue thread
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9568] nProbe started successfully
>>>
>>>
>>> _______________________________________________
>>> Ntop mailing list
>>> Ntop@listgateway.unipi.it
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
Re: nprobe not opening --bgp-port [ In reply to ]
Hello Jason, thanks for reporting. I've made a fix as the BGP plugin was failing to start in collector mode (-3=2055). Please, hold on a couple of hours -- new builds are in progress -- and then upgrade to the latest nprobe 8.7.

Regards,
Simone

> On 25 Feb 2019, at 04:04, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>
> Hi Simone,
>
> If you’re talking about the BGP client script:
>
> https://github.com/ntop/nProbe/blob/master/bgp/bgp_probe_client.pl
>
> The script is already running, and a session is established between it and my router.
>
> The script produces the following error every second:
>
> Couldn't connect to :4096 : IO::Socket::INET: connect: Connection refused
>
>> On Feb 24, 2019, at 5:38 PM, Simone Mainardi <mainardi@ntop.org> wrote:
>>
>> Jason,
>>
>> You need an auxiliary script that speaks BGP. Then nProbe will connect to it over the specified --bgp-port.
>>
>> See https://www.ntop.org/guides/nProbe/plugins/bgp.html?highlight=bgp
>>
>> Regards,
>> Simone
>>
>>> On 22 Feb 2019, at 16:18, Jason Lixfeld <jason-ntop@lixfeld.ca> wrote:
>>>
>>> Hi,
>>>
>>> Trying to use the BGP plugin, but seems nprobe isn’t opening the specified BGP port. Something I’m missing?
>>>
>>> #nprobe.conf
>>> -b=2
>>> -i=none
>>> -n=none
>>> -3=2055
>>> --zmq=tcp://127.0.0.1:5556
>>> -T="@NTOPNG@ %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
>>> -S=1:1000:1
>>> -I=nprobe
>>> --bgp-port=4096
>>>
>>> root@ntop:/tmp# ss -tupan | grep nprobe
>>> udp UNCONN 0 0 *:2055 *:* users:(("nprobe",pid=1850,fd=5))
>>> udp UNCONN 0 0 :::2055 :::* users:(("nprobe",pid=1850,fd=14))
>>> tcp LISTEN 0 100 127.0.0.1:5556 *:* users:(("nprobe",pid=1850,fd=13))
>>> tcp ESTAB 0 0 127.0.0.1:5556 127.0.0.1:36098 users:(("nprobe",pid=1850,fd=16))
>>> root@ntop:/tmp#
>>>
>>> # systemctl start nprobe
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin FTP Protocol [/etc/nprobe.license.ftp]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv0 Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv1 Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin GTPv2 Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin HTTP Protocol [/etc/nprobe.license.http]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin IMAP Protocol [/etc/nprobe.license.email]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Netflow-Lite Plugin [/etc/nprobe.license.nflite]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Oracle Protocol [/etc/nprobe.license.oracle]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin POP3 Protocol [/etc/nprobe.license.email]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin Radius Protocol [/etc/nprobe.license.radius]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin RTP Plugin [/etc/nprobe.license.voip]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin S1AP Protocol [/etc/nprobe.license.S1AP]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SIP Plugin [/etc/nprobe.license.voip]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:857] Unable to enable plugin SMTP Protocol [/etc/nprobe.license.email]: Missing license file
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:4164] Valid nProbe Pro license found
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6086] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ?
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6089] WARNING: The input interfaceId is set to 0: did you forget to use -u perhaps ?
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6176] Welcome to nProbe Pro v.8.6.190214 ($Revision: 6317 $) for x86_64-pc-linux-gnu with native PF_RING acceleration
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6186] Running on Debian GNU/Linux 9.1 (stretch)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6197] [LICENSE] nProbe SystemId: 3B37D43876076B20
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6201] Tracing enabled
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:6264] Sample rate [packet: 1][flow collection/export: 1000/1]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8956] Welcome to nProbe v.8.6.190214 for x86_64-pc-linux-gnu
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7921] Compiling flow templates...
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7966] Using NetFlow Packet Payload Len: 1472
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:7896] @NTOPNG@ expanded to " %L7_PROTO %IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_SRC_PORT %L4_DST_PORT %IPV6_SRC_ADDR %IPV6_DST_ADDR %IP_PROTOCOL_VERSION %PROTOCOL %IN_BYTES %IN_PKTS %OUT_BYTES %OUT_PKTS %FIRST_SWITCHED %LAST_SWITCHED %SRC_VLAN %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %TCP_FLAGS %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %EXPORTER_IPV4_ADDRESS %SRC_AS_PATH_1 %SRC_AS_PATH_2 %SRC_AS_PATH_3 %SRC_AS_PATH_4 %SRC_AS_PATH_5 %SRC_AS_PATH_6 %SRC_AS_PATH_7 %SRC_AS_PATH_8 %SRC_AS_PATH_9 %SRC_AS_PATH_10 %DST_AS_PATH_1 %DST_AS_PATH_2 %DST_AS_PATH_3 %DST_AS_PATH_4 %DST_AS_PATH_5 %DST_AS_PATH_6 %DST_AS_PATH_7 %DST_AS_PATH_8 %DST_AS_PATH_9 %DST_AS_PATH_10"
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_SRC_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV4_DST_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_SRC_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [template.c:2367] Duplicate template element found IPV6_DST_ADDR: skipping
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin BGP Update Listener [bgp]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1224] Enabling plugin BGP Update Listener
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL DB [db]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Export Plugin [export]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin Modbus Plugin [modbus]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin MySQL Plugin [mysql]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin NETBIOS Protocol [netbios]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:972] Scanning plugin SSDP Protocol [ssdp]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:1238] 1 plugin(s) enabled
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8334] Scanning flow template...
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=257]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=258]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=259]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_ADDR [num 7][id 8][4 bytes][total 17 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_SRC_MASK [num 8][id 9][1 bytes][total 18 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 9][id 10][4 bytes][total 22 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 10][id 11][2 bytes][total 24 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_ADDR [num 11][id 12][4 bytes][total 28 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_DST_MASK [num 12][id 13][1 bytes][total 29 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 13][id 14][4 bytes][total 33 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV4_NEXT_HOP [num 14][id 15][4 bytes][total 37 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 15][id 16][4 bytes][total 41 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 16][id 17][4 bytes][total 45 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 17][id 21][4 bytes][total 49 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 18][id 22][4 bytes][total 53 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 19][id 23][4 bytes][total 57 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 20][id 24][4 bytes][total 61 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 21][id 58][2 bytes][total 63 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 22][id 60][1 bytes][total 64 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV4_ADDRESS [num 23][id 130][4 bytes][total 68 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 24][id 118][2 bytes][total 70 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 25][id 290][4 bytes][total 74 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 26][id 291][4 bytes][total 78 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 27][id 292][4 bytes][total 82 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 28][id 293][4 bytes][total 86 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 29][id 294][4 bytes][total 90 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 30][id 295][4 bytes][total 94 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 31][id 296][4 bytes][total 98 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 32][id 297][4 bytes][total 102 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 33][id 298][4 bytes][total 106 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 34][id 299][4 bytes][total 110 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 35][id 300][4 bytes][total 114 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 36][id 301][4 bytes][total 118 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 37][id 302][4 bytes][total 122 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 38][id 303][4 bytes][total 126 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 39][id 304][4 bytes][total 130 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 40][id 305][4 bytes][total 134 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 41][id 306][4 bytes][total 138 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 42][id 307][4 bytes][total 142 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 43][id 308][4 bytes][total 146 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 44][id 309][4 bytes][total 150 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8344] Template [id=260]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_BYTES [num 1][id 1][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IN_PKTS [num 2][id 2][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found PROTOCOL [num 3][id 4][1 bytes][total 9 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_TOS [num 4][id 5][1 bytes][total 10 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found TCP_FLAGS [num 5][id 6][1 bytes][total 11 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_SRC_PORT [num 6][id 7][2 bytes][total 13 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found INPUT_SNMP [num 7][id 10][4 bytes][total 17 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L4_DST_PORT [num 8][id 11][2 bytes][total 19 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUTPUT_SNMP [num 9][id 14][4 bytes][total 23 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS [num 10][id 16][4 bytes][total 27 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS [num 11][id 17][4 bytes][total 31 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found LAST_SWITCHED [num 12][id 21][4 bytes][total 35 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found FIRST_SWITCHED [num 13][id 22][4 bytes][total 39 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_BYTES [num 14][id 23][4 bytes][total 43 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found OUT_PKTS [num 15][id 24][4 bytes][total 47 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_SRC_ADDR [num 16][id 27][16 bytes][total 63 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_DST_ADDR [num 17][id 28][16 bytes][total 79 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_VLAN [num 18][id 58][2 bytes][total 81 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IP_PROTOCOL_VERSION [num 19][id 60][1 bytes][total 82 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found IPV6_NEXT_HOP [num 20][id 62][16 bytes][total 98 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found EXPORTER_IPV6_ADDRESS [num 21][id 131][16 bytes][total 114 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found L7_PROTO [num 22][id 118][2 bytes][total 116 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_1 [num 23][id 290][4 bytes][total 120 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_2 [num 24][id 291][4 bytes][total 124 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_3 [num 25][id 292][4 bytes][total 128 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_4 [num 26][id 293][4 bytes][total 132 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_5 [num 27][id 294][4 bytes][total 136 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_6 [num 28][id 295][4 bytes][total 140 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_7 [num 29][id 296][4 bytes][total 144 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_8 [num 30][id 297][4 bytes][total 148 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_9 [num 31][id 298][4 bytes][total 152 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found SRC_AS_PATH_10 [num 32][id 299][4 bytes][total 156 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_1 [num 33][id 300][4 bytes][total 160 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_2 [num 34][id 301][4 bytes][total 164 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_3 [num 35][id 302][4 bytes][total 168 bytes]
>>> Feb 22 10:00:35 ntop influxd[738]: [httpd] ::1 - - [22/Feb/2019:10:00:35 -0500] "POST /write?db=ntopng HTTP/1.1" 204 0 "-" "-" 9b6a879c-36b2-11e9-826e-000c2934ce36 1498
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_4 [num 36][id 303][4 bytes][total 172 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_5 [num 37][id 304][4 bytes][total 176 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_6 [num 38][id 305][4 bytes][total 180 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_7 [num 39][id 306][4 bytes][total 184 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_8 [num 40][id 307][4 bytes][total 188 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_9 [num 41][id 308][4 bytes][total 192 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8350] Found DST_AS_PATH_10 [num 42][id 309][4 bytes][total 196 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8374] Scanning option template...
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_FLOWS_EXP [id 42][4 bytes][total 4 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8380] Found TOTAL_PKTS_EXP [id 41][4 bytes][total 8 bytes]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8412] Each flow is 196 bytes long
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8413] The # flows per packet has been set to 6
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8416] IP TOS is accounted
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:8442] Non IPv4/v6 traffic is discarded according to the template
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:507] Loaded database /usr/share/ntopng/httpdocs/geoip/GeoLite2-ASN.mmdb [ip_version: 6]
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9166] The flows hash has 131072 buckets
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9168] Flows older than 120 seconds will be exported
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9171] Flows inactive for at least 30 seconds will be exported
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9174] Expired flows will not be queued for more than 30 seconds
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9181] Exported flows with engineType 0 and engineId 147
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9249] Flows will be emitted in NetFlow 9 format
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9259] Collected flows sampled at 1:1000 rate
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9302] Flow input interface index is set to 0
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9308] Flow output interface index is set to 0
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9322] Not capturing packet from interface (collector mode)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4721] Initializing ZMQ as server
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:4764] Succesfully created ZMQ endpoint tcp://127.0.0.1:5556
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [util.c:3790] nProbe changed user to 'nprobe'
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:933] Enabling plugin BGP Update Listener
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL DB (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Export Plugin (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin Modbus Plugin (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin MySQL Plugin (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin NETBIOS Protocol (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [plugin.c:929] Disabling plugin SSDP Protocol (no template is using it)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:83] Created UDP sockets
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [collect.c:142] Flow collector listening on port 2055 (IPv4/v6)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9445] Starting 1 packet fetch thread(s)
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [engine.c:3721] Starting bucket dequeue thread
>>> Feb 22 10:00:35 ntop nprobe[1850]: 22/Feb/2019 10:00:35 [nprobe.c:9568] nProbe started successfully
>>>
>>>
>>> _______________________________________________
>>> Ntop mailing list
>>> Ntop@listgateway.unipi.it
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop