David yes you can. When you want to do SPAN + collection you need to start two nprobe instances both exporting to ELK.
So nprobe -n none -i ethX … --elastic … nprobe -n none -i none -3 <port> … --elastic … Regards Luca > On 12 Jul 2018, at 05:51, David Kraut <[email protected]> wrote: > > Is it possible to run nprobe and ntopng on the same box? If so, what is the > correct config for Ubuntu 18 assuming I want to ingest both both SPAN and > Netflow and ultimately send stale data to ELK (or similar) to maintain ~30 > day history. I'm able to get ntopng working and connect via port 3000, but > when I try to install nprobe on the same box, I'm never able to get port 2055 > to show as listening via netstat. > > Thanks! > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
