nProbe: Collect Operating System

[antoniovalenzuela]

Hi,

Using ntopng -i eth0 I can see the operating system of hosts.

With nprobe + ntopng I do not get the O.S. Is there a% flow that sends this information?

Configuration:

nprobe -n none -i eth0 --zmq tcp://192.168.80.6:5556 --zmq-probe-mode --as-list GeoIPASNum.dat -V 10 -T "%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %L7_PROTO %L7_PROTO_NAME %DNS_QUERY %HTTP_SITE"

[simonemainardi]

currently the ndpi-detected OS is not propagated from nprobe to ntopng. Marking this feature as enhancement.

[antoniovalenzuela]

thanks!!