Hi!
Any clue? Maybe touching something on nDPI? I know that traffic is
identified by the magic number, but we have a client that many of his
traffic is marked as unknown and we need to do something... Any ideas?
Thanks in advance,
Iker
El 09/10/2012 22:41, Iker Vázquez escribió:
Hi all,
I would like to know if its possible to customize que traffic that
Nprobe mark as "Unknown". Maybe doing a JOIN on a table which have a
port-IP relation, or maybe passing some arguments to the nDPI package.
I'd like to know too if it's possible to catch ARP, BROADCAST and
MULTICAST traffic. TTL's too.
We have a customer very interested in having ARP and MUTICAST traffic.
It's possible?
Thanks in advance,
Iker
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
