nProbe documentation¶
nProbe is an extensible NetFlow v5 v9/NetFlow Lite/sFlow/IPFIX/jFlow probe/collector/proxy for IPv4/v6.
User's Guide
- Introduction
- nProbe Modes
- What’s New
- How to Start nProbe
- Tuning nProbe Performance
- High-Speed Flow Collection
- Expected Collection Performance
- Collecting Flows from Many Routers
- Handling Trillion Flows: Dumping Flows into ClickHouse
- Data Deduplication
- SNMP Interfaces Polling
- Collecting nTap Traffic
- InfluxDB-based Timeseries Dump
- HowTo Create sFlow Timeseries
- Flow Relay
- Flow Replication / Fanout
- Using TLS In Flow Collection/Export
- TLS Certificates Validation
- Command Line Options
- Note on interface indexes and (router) MAC/IP addresses
- Further plugin available command line options
- HTTP Protocol
- DNS/LLMNR Protocol
- SIP Plugin
- RTP Plugin
- FTP Protocol
- SMTP Protocol
- Netflow-Lite Plugin
- GTPv0 Signaling Protocol
- GTPv1 Signaling Protocol
- GTPv2 Signaling Protocol
- Radius Protocol
- Modbus Plugin
- Diameter Protocol
- NETBIOS Protocol
- SSDP Protocol
- DHCP Protocol
- IMAP Protocol
- POP3 Protocol
- Export Plugin
- Custom Fields
- NetFlow v9/IPFIX format [-T]
- Using nProbe with ntopng
- Using Kafka with nProbe
- Running nProbe in IPS Mode
- Agent Mode support in nProbe
- Third-Party Integrations
- Frequently Asked Questions
- nProbe Case Study
- nProbe Plugins
- Developing nProbe Plugins
- BPF Packet Filtering Expressions
- Flow Information Elements
- Hardware Sizing
Other Products