Hello,
We have installed ntopng and nrpobe
The selected config is the following :
1FW device (softflowd) --> export to --> port 2055 (nprobe) --> zmq="tcp://*:2056" --> ntopng tcp://127.0.0.1:2056
I have couple of problem with the install:
## Pb 1 : flow stops to get collected ##
1. upon startup flow get collected "ok" for couple of minutes
2. …then they stop !
3. If I restart the nprobe / ntopng -- they got collected for couple of minutes and stop again!
Maybe It is a licence problem ?
This is not very clear.
## pb 2 : VLAN flow tagging ##
We are trying to classify flows exported from the FW based on the VLAN they originated from.
This feature looks nice and would allow us to have a "per VLAN" vision of the flows
No matter how hard we try, We only got one VLAN (0)
Maybe this is also related to some licence issues…
## Pb 3 : probe licence ##
It is not yet very clear to me if we need one nprobe licence per firewall
…or if It is ok to send all flows to one nprobe
Thanks for your help.
G.B.
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
We have installed ntopng and nrpobe
The selected config is the following :
1FW device (softflowd) --> export to --> port 2055 (nprobe) --> zmq="tcp://*:2056" --> ntopng tcp://127.0.0.1:2056
I have couple of problem with the install:
## Pb 1 : flow stops to get collected ##
1. upon startup flow get collected "ok" for couple of minutes
2. …then they stop !
3. If I restart the nprobe / ntopng -- they got collected for couple of minutes and stop again!
Maybe It is a licence problem ?
This is not very clear.
## pb 2 : VLAN flow tagging ##
We are trying to classify flows exported from the FW based on the VLAN they originated from.
This feature looks nice and would allow us to have a "per VLAN" vision of the flows
No matter how hard we try, We only got one VLAN (0)
Maybe this is also related to some licence issues…
## Pb 3 : probe licence ##
It is not yet very clear to me if we need one nprobe licence per firewall
…or if It is ok to send all flows to one nprobe
Thanks for your help.
G.B.
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop