Mailing List Archive

Ntop+Nprobe: the floods decrease to zero in some minutes
Dear, I have a server with Debian 10 + Ntopng 3.9 + Nprobe 8.7 in
"collector mode".

My config is:

/etc/ntopng/ntopng.conf:

-G=/var/run/ntopng.pid
-e=
-i="tcp://127.0.0.1:5556"
-w=3000
-m=172.31.10.0/24,179.0.141.0/24
-n=1
-S=
-d=/var/lib/ntopng
-q=
--community

/etc/nprobe/nprobe.conf:

-i=none
--collector-port=2055
--zmq=tcp://*:5556
-n=none
-T=@NTOPNG@
-g=/var/run/nprobe.pid

I start both service with "systemctl nprobe start" and "systemctl ntopng
start".

Everything is OK, I can see a lot of flows in Ntopng interface.

But after some minutes, the flows decrease and they come to 0 (zero), and
this value remains just like this forever.

Please can you help me ???

Thanks a lot !!!
Re: Ntop+Nprobe: the floods decrease to zero in some minutes [ In reply to ]
Dear, I can see in /var/log/syslog:

Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:585]
ERROR:
***************************************************************************
Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:586]
ERROR: * NOTE: You have reached the max demo 25000 flows export: no more
exports *
Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:588]
ERROR: * NOTE: no additional flows will be exported by this nProbe instance
*
Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:589]
ERROR:
***************************************************************************

Do I have to pay for Nprobe ?

El mar., 12 nov. 2019 a las 11:47, Roberto Carna (<robertocarna36@gmail.com>)
escribió:

> Dear, I have a server with Debian 10 + Ntopng 3.9 + Nprobe 8.7 in
> "collector mode".
>
> My config is:
>
> /etc/ntopng/ntopng.conf:
>
> -G=/var/run/ntopng.pid
> -e=
> -i="tcp://127.0.0.1:5556"
> -w=3000
> -m=172.31.10.0/24,179.0.141.0/24
> -n=1
> -S=
> -d=/var/lib/ntopng
> -q=
> --community
>
> /etc/nprobe/nprobe.conf:
>
> -i=none
> --collector-port=2055
> --zmq=tcp://*:5556
> -n=none
> -T=@NTOPNG@
> -g=/var/run/nprobe.pid
>
> I start both service with "systemctl nprobe start" and "systemctl ntopng
> start".
>
> Everything is OK, I can see a lot of flows in Ntopng interface.
>
> But after some minutes, the flows decrease and they come to 0 (zero), and
> this value remains just like this forever.
>
> Please can you help me ???
>
> Thanks a lot !!!
>
Re: Ntop+Nprobe: the floods decrease to zero in some minutes [ In reply to ]
Hi Roberto,

You will need a license to run nprobe. Please purchase one from our shop
https://shop.ntop.org or contact us privately
http://www.ntop.org/support/need-help-2/contact-us if you need a demo
license.

Regards,

Emanuele

On 11/12/19 4:14 PM, Roberto Carna wrote:
> Dear, I can see in /var/log/syslog:
>
> Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:585]
> ERROR:
> ***************************************************************************
> Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:586]
> ERROR: * NOTE: You have reached the max demo 25000 flows export: no
> more exports *
> Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:588]
> ERROR: * NOTE: no additional flows will be exported by this nProbe
> instance      *
> Nov 12 12:05:35 NFW nprobe[19291]: 12/Nov/2019 12:05:35 [export.c:589]
> ERROR:
> ***************************************************************************
>
> Do I have to pay for Nprobe ?
>
> El mar., 12 nov. 2019 a las 11:47, Roberto Carna
> (<robertocarna36@gmail.com <mailto:robertocarna36@gmail.com>>) escribió:
>
> Dear, I have a server with Debian 10 + Ntopng 3.9 + Nprobe 8.7 in
> "collector mode".
>
> My config is:
>
> /etc/ntopng/ntopng.conf:
>
> -G=/var/run/ntopng.pid
> -e=
> -i="tcp://127.0.0.1:5556 <http://127.0.0.1:5556>"
> -w=3000
> -m=172.31.10.0/24,179.0.141.0/24
> <http://172.31.10.0/24,179.0.141.0/24>
> -n=1
> -S=
> -d=/var/lib/ntopng
> -q=
> --community
>
> /etc/nprobe/nprobe.conf:
>
> -i=none
> --collector-port=2055
> --zmq=tcp://*:5556
> -n=none
> -T=@NTOPNG@
> -g=/var/run/nprobe.pid
>
> I start both service with "systemctl nprobe start" and "systemctl
> ntopng start".
>
> Everything is OK, I can see a lot of flows in Ntopng interface.
>
> But after some minutes, the flows decrease and they come to 0
> (zero), and this value remains just like this forever.
>
> Please can you help me ???
>
> Thanks a lot !!!
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop