There are cases where you may require nProbe to act as a sort of "hub" for collection, such as behind a NAT. Once this configuration is saved and the services started, you are ready to start viewing flow data in ntopng. Here we select the NetFlow version, as well as any fields we want to decode from the flow. ntopng may operate as a front-end collector or as a stand-alone collector/display program. The final step, is to configure the "Flow Export Format". It displays a list of hosts that are currently using the network and reports information concerning the (IP and non-IP) traffic generated and received by each host. We will now instruct nProbe to create this socket by setting the "ZeroMQ Endpoint" to "tcp://127.0.0.1:5556". In the previous step, we configured ntop to connect to a ZMQ socket on localhost. The listening port is where the NetFlow exporter should send to.
Here we configure our "Listening Port", and "ZMQ Endpoint", and "Flow Export Format".
In the nBox UI, navigate to "Appplication > nProbe", and select the "Proxy" tab. We must now configure nProbe to listen for incoming NetFlow traffic, decode it, and publish it to ntopng. Once the changes are saved, we will see this in the list of Interfaces in ntop. In our case, we have nProbe running on the same machine, so we will be connecting to a socket on localhost. We then specify our address for the "Collector Endpoints". Under Interfaces, we will select "Collector Only" In this example, we are going to use ntopng only as a NetFlow collector. This will be a connection to a ZeroMQ socket that we will configure nProbe to create in the next step.įrom the nBox UI, navigate to "Applications > ntopng", and select the configuration tab. Our first task is to configure an interface for ntopng to listen on. Ntopng and nProbe utilize ZeroMQ. This gives us greater control over how our flow data can be distributed to collectors. In this article we will cover two ways to configure nProbe using proxy mode using the nBox graphical interface, so that we may forward flows to either ntopng or another collector such as SolarWinds NTA. There are numerous ways to configure nProbe to work with NetFlow.
0 kommentar(er)
