nProbe User’s Guide An Extensible NetFlow v5/v9/IPFIX Probe for IPv4/v6
Version 7.2 May 2016 © 2002-16 nProbe User’s Guide v.7.2
Introduction...... 3 Main Features...... 4 What’s New...... 4 Installing nProbe...... 6 Licensing...... 6 nProbe Command Line Options...... 7 Running nProbe as a Daemon...... 19 Configuration Files...... 19 Automatic Startup...... 19 Daemon Control...... 20 Running nProbe on Windows...... 21 Specify Monitored Interfaces...... 21 Execution as a Windows Service...... 22 Tuning nProbe Performance...... 23 Using nProbe with ntopng...... 24 Usage Behind a Firewall...... 25 Exporting to Apache Kafka...... 26 Example...... 26 Frequently Asked Questions...... 27 nProbe Plugins...... 28 BGP Plugin...... 28 DNS Plugin...... 29 Export Plugin...... 29 GTPv0 Plugin...... 29 GTPv1 Plugin...... 30 GTPv2 Plugin...... 30 HTTP Plugin...... 31 IMAP Plugin...... 31 MySQL Plugin...... 32 Oracle Plugin...... 32 POP3 Plugin...... 33 Radius Plugin...... 33 RTP Plugin...... 33 SIP Plugin...... 34 SMTP Plugin...... 34 NetFlow-Lite Plugin...... 34 Developing nProbe Plugins...... 36 References...... 41 Appendix A: BPF Packet Filtering Expressions...... 42 Examples...... 45 Appendix B: Flow Information Elements...... 46 Appendix C: nProbe Usage Modes...... 54 Appendix D: EULA...... 55