Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NTop: Misc

nprobe 6 and engine id

 

 

NTop misc RSS feed   Index | Next | Previous | View Threaded


bwilliams-signups at jadeworld

Dec 21, 2010, 3:10 PM

Post #1 of 2 (454 views)
Permalink
nprobe 6 and engine id

Anyone successfully tried using -E parameter for setting engine id? I
tried setting engine_type and engine_id so the collector knows where
the flows came from.
ie
nprobe -i eth0 -I nprobe-eth0 -G -E 3:1 -V9 -T "%IPV4_SRC_ADDR
%IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS
%IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT
%TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK
%IPV4_DST_MASK %ENGINE_TYPE %ENGINE_ID" -n collectorhost:2055

Using collector nfdump/nfcapd just shows engine type and id as 0.

Thanks
Ben
_______________________________________________
Ntop-misc mailing list
Ntop-misc [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop-misc


bwilliams-signups at jadeworld

Dec 22, 2010, 12:10 PM

Post #2 of 2 (410 views)
Permalink
Re: nprobe 6 and engine id [In reply to]

Got it working now, nfcapd needed "-T all" option.

Ben

On Wed, Dec 22, 2010 at 12:10 PM, Ben WIlliams
<bwilliams-signups [at] jadeworld> wrote:
> Anyone successfully tried using -E parameter for setting engine id? I
> tried setting engine_type and engine_id so the collector knows where
> the flows came from.
> ie
> nprobe -i eth0 -I nprobe-eth0 -G -E 3:1 -V9 -T "%IPV4_SRC_ADDR
> %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS
> %IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT
> %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %IPV4_SRC_MASK
> %IPV4_DST_MASK %ENGINE_TYPE %ENGINE_ID" -n collectorhost:2055
>
> Using collector nfdump/nfcapd just shows engine type and id as 0.
>
> Thanks
> Ben
>
_______________________________________________
Ntop-misc mailing list
Ntop-misc [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

NTop misc RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.