ntop / ntop/nProbe

nProbe and netflow-lite missing packets

Open
#335 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

to be verified
Dominant language
Lua
Stars
1.8k
Forks
51
PR merge metrics
No merged PRs in 30d

Description

We are currently evaluating nProbe + Netflow-Lite along Scrutinizer for their UI and reporting capabilities. Our environment is currently combination of Cisco 4948E-S switches that support only netflow-lite which is our reason for needing to build a solution based on nProbe.

On a 4948E, we have the necessary configuration and on the nProbe server, we can see all of the samples being exported and reaching the server using tcpdump and looking at udp traffic. Over 1000 samples for 10-15 seconds. However, this data does not equate to a 1:1 map between nProbe and Scrutinizer and it doesn't appear that nProbe is forwarding the sampled packets appropriately as for every 1000 that we see leaving the switch, maybe 10 samples are being exported.

Here is the command that we are running:
nprobe –nflite 2055 -i eth0 -n scrutinizersvrip:2056 -V 9 -t 60 -d 15

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the provided nProbe command and comparing the samples observed with tcpdump against the packets forwarded to Scrutinizer. Done means the expected NetFlow-Lite sample volume reaches Scrutinizer rather than only a small fraction; the issue does not name source files or tests.

Written by the indexing model from the issue text.

Assessment

Domain
networking
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.