I can’t see port 5556 listening on my ~]# netstat -tulpenĪctive Internet connections (only servers) I am running into the issue with nprobe and ntopng. Furthermore note that nProbe requires a license. At the time of writing, nProbe had version v.02 while ntopng was in version v.02. It should be used only for statistics but not for real-time troubleshooting. However, it turned out that the “real-time” functionalities of NetFlow are limited since it only refreshes flows every few seconds/bytes, but does not give a real-time look at the network. This single flow collector can receive flows from different subnets and routers/firewalls and even VPN tunnel interfaces, etc. NetFlow on the other hand can be used to send traffic statistics from different locations to a NetFlow flow collector, in this case to the tool nProbe. This has the major disadvantage that it only gets packets from directly connected layer 2 networks and vlans. My current ntopng installation uses a dedicated monitoring ethernet port (mirror port) in order to “see” everything that happens in that net. I am sending the NetFlow packets from a Palo Alto Networks firewall.
It refers to my blog post about installing ntopng on a Linux machine.
This blog post is about using NetFlow for sending network traffic statistics to an nProbe collector which forwards the flows to the network analyzer ntopng.
0 kommentar(er)
