-
Notifications
You must be signed in to change notification settings - Fork 713
Description
Environment:
- OS name: Ubuntu
- OS version: 22.04
- Architecture: amd64 / Virtualized
- ntopng version/revision: [e.g. 6.4.250917]
What happened:
We're trialing ntopng Enterprise M but we're having issues with the interfaces count on our sFlow Exporters. I wasn't sure if this was a misunderstanding on how sflow worked on my end or if the count was actually wrong.
We used to have every switch interface configured to monitor sflow on ingree only, but we have the uplinks configured for ingress/egress.
We then changed it so that each switch currently has one interface configured to export ingress and egress flows.
But when we go to the Exporter's page under (Flow Exp. => nProbe => Exporters (tab at the top) => Click the switch's name) we see 23 interfaces (at the moment) with only 2 of them having traffic linked.
It seems like both of the interfaces with traffic are the same one, but one is ingress and one is egress.
The switch actually has 10 x 1Gb interfaces, 1 x TenGig interfaces active and 1x VLAN interfaces active and with traffic. Assuming each main interface is doubled and the VLANs aren't, that'd make a total of 23, so I assume that's where the amount is coming from.
Is ntopng actually supposed to count all of those interfaces or should it be either counting 1/2 since we are only collecting the ingress/egress of one of the interfaces?
and
P.S. we expect to have 10 x 54 ports switches + 2x 26 ports and around 80 ports from our vCenter vDS which would be 672+ interfaces, we only actually need to monitor maybe 10 + the vDS ones.