6 Replies Latest reply on Mar 6, 2009 10:23 AM by gwsample

    nprobe

      I'm wondering if someone could share with me how they got nprobe working and what version of nrobe.

      I have followed the posts from 2007 that indicate using -u and -Q options on the nprobe command line will fix the interface problem seen in NetFlow.  I'm running this from a Windows Box and have added the node successfully to Orion and the NetFlow config.

      Available interfaces:
              [index=0] 'Generic dialup adapter'
              [index=1] 'Broadcom NetXtreme Gigabit Ethernet Driver'

      I am using if index 1 on 192.168.2.56 to collect and send NetFlow data to my collector @0.10.

       nprobe /c -i 1 -n192.168.0.10:2055 -u 1 - Q 1 -b2

      Events in NetFlow:


      3/14/2008 09:02 AMNetFlow Receiver Service [EVAL] is receiving a NetFlow data stream from an unmanaged interface on 192.168.2.56. The NetFlow data stream will be discarded. Please use the Orion System Manager to add Interface #58801 in order to process this NetFlow data stream. 
       3/14/2008 09:00 AMNetFlow Receiver Service [EVAL] is receiving a NetFlow data stream from an unmanaged interface on 192.168.2.56. The NetFlow data stream will be discarded. Please use the Orion System Manager to add Interface #31261 in order to process this NetFlow data stream. 
       3/14/2008 08:58 AMNetFlow Receiver Service [EVAL] is receiving a NetFlow data stream from an unmanaged interface on 192.168.2.56. The NetFlow data stream will be discarded. Please use the Orion System Manager to add Interface #41766 in order to process this NetFlow data stream. 
       3/14/2008 08:57 AMNetFlow Receiver Service [EVAL] is receiving a NetFlow data stream from an unmanaged interface on 192.168.2.56. The NetFlow data stream will be discarded. Please use the Orion System Manager to add Interface #7278 in order to process this NetFlow data stream. 

      I have also tried using the snmp MIB information like mentioned in one other post:

       nprobe /c -i 1 -n192.168.0.10:2055 -u 65539 - Q 65539 -b2

      But similar Events have shown up  with crazy Interface numbers.

       It looks like this may be a nprobe problem, but if I can get a version from someone who has this working, I can be sure.

      Here is my nprobe version info:

      C:\Program Files\nProbe-Win32>nprobe /c -h
      Running nProbe for Win32.
      *************************************************************
      * NOTE: This is a DEMO version limited to 2000 flows export. *
      *************************************************************

      14/Mar/2008 09:13:07 [plugin.c:  63] Initializing static plugins.
      14/Mar/2008 09:13:07 [sipPlugin.c:  67] Initialized SIP plugin
      14/Mar/2008 09:13:07 [rtpPlugin.c:  78] Initialized RTP plugin
      14/Mar/2008 09:13:07 [plugin.c: 111] 2 plugin(s) loaded [2 delete][2 packet].

      Welcome to nprobe v.4.0 for Win32
      Built on 11/08/05 18:44:37
      Copyright 2002-05 by Luca Deri <deri@ntop.org>
       

       
      Thanks