Jeff, You need both nProbe and ntopng. nProbe interprets the IPFIX and outputs the data to ntopng that is in charge of visualisation.
A simple configuration is the following: ./nprobe -i none -n none --collector-port 9995 --zmq tcp://127.0.0.1:5556 <tcp://127.0.0.1:5556> ./ntopng -i tcp://*:5556 <tcp://*:5556> -m <a list of networks of interest, e.g., 192.168.0.1/24> The communication between ntopng and nprobe takes place over ZMQ. Regards, Simone > On 12 Dec 2017, at 15:23, Kotch, Jeff <[email protected]> wrote: > > Hi there, > I’m new to ntopng and hoping to get some assistance or guidance. > > I’ve got an ntopng/nProbe server set up using a single interface > I’ve got an Avaya switch sending IPFIX flow data to my ntopng server over > port 9995. My understanding is I need to setup ntopng as a collector for that > flow data. > > All I’m seeing in ntopng is a single flow from switch to server along with > all other ‘local’ traffic hitting the server. I’d like to only see the flow > data from the switch. I expected nProbe to create an interface for me to > select as I’d seen in ntop but I haven’t seen that yet. I understand that I > need to set nProbe with some sort of zmq command but I’m struggling to > understand the context for that command. I’d like the desired configuration > to remain persistent through reboots and start up automatically. Ntopng > starts automatically now but I don’t think there’s currently any nProbe > configuration. I am finding that as I enter an nProbe command now, the cli > does not return me to a prompt to restart the ntopng service. > > > Any assistance you can offer would be greatly appreciated. > Thank you > > > Jeff > > _______________________________________________ > Ntop-misc mailing list > [email protected] <mailto:[email protected]> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > <http://listgateway.unipi.it/mailman/listinfo/ntop-misc>
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
