Hi Guys,
To follow up on my email of yesterday, I did a very specific test.
I have two systems connected by a 10Gb fibre link source is 10.10.10.2
destination is 10.10.10.1. If you look at the following you data you can
see that information on the interface screen closely matches what iptraf-ng
reports, but is significantly different from what is reported for the two host
ip addresses. This nttcp test generator was sending UDP traffic.
When using TCP the number were much closer in matching between
the interface stats and the individual hosts
Bytes 1.97 GB
Received Packets 176,819 Pkts
Dropped Packets 0 Pkts [ 0 % ]
10.10.10.1 Remote 10.10.10.1 00:00:03
SentRcvd 1.96 GB
10.10.10.2 Remote 10.10.10.2 00:00:03
SentRcvd 1.96 GB
UDP TEST
Also here is the output of when I shutdown ntopng
^C27/Jun/2013 09:58:02 [main.cpp:37] Shutting down...
27/Jun/2013 09:58:04 [ProtoStats.cpp:35] [IPv4] 2.01 GB/1.54 M Packets
27/Jun/2013 09:58:04 [ProtoStats.cpp:35] [IPv6] 0 B/0.00 Packets
27/Jun/2013 09:58:04 [ProtoStats.cpp:35] [ARP] 102 B/2.00 Packets
27/Jun/2013 09:58:04 [ProtoStats.cpp:35] [MPLS] 0 B/0.00 Packets
27/Jun/2013 09:58:04 [ProtoStats.cpp:35] [Other] 0 B/0.00 Packets
on 10.10.10.2 I run:
nttcp -i &
on 10.10.10.1 I run:
nttcp -n512000 -u -T -f"%9b%8.2rt%12.4rbr" 10.10.10.1
I run ntopng on 10.10.10.1
Name p1p1
Bytes 2.0 GB
Received Packets
1,536,021 Pkts
Dropped Packets
0 Pkts [ 0 % ]
IP Address Location Symbolic Name Seen Since ASN Breakdown
Traffic
10.10.10.1 Remote 10.10.10.1 00:00:09
SentRcvd 739.26 MB
10.10.10.2 Remote 10.10.10.2 00:00:09
SentRcvd 739.26 MB
(Router) MAC Address 00:90:0B:2D:34:20
IP Address 10.10.10.1
Name 10.10.10.1 Remote
First Seen 06/27/13 09:41:26 [00:06:55 ago]
Last Seen 06/27/13 09:41:34 [00:06:47 ago]
Sent vs Received Traffic Breakdown
SentRcvd
Traffic Sent 6 Pkts / 451
Traffic Received 512,011 Pkts / 739.26 MB
(Router) MAC Address 00:90:0B:2D:34:26
IP Address 10.10.10.2
Name 10.10.10.2 Remote
First Seen 06/27/13 09:41:26 [00:07:36 ago]
Last Seen 06/27/13 09:41:34 [00:06:28 ago]
Sent vs Received Traffic Breakdown
SentRcvd
Traffic Sent 512,011 Pkts / 739.26 MB
Traffic Received 6 Pkts / 451
This is from iptraf-ng being run on 10.10.10.2
Statistics for p1p1
?????????????????????????????????????????????????????????????????????????????????????????????????????????
? ?
? Total Total Incoming Incoming Outgoing Outgoing ?
? Packets Bytes Packets Bytes Packets Bytes ?
? Total: 1469437 2067M 1469429 2067M 8 599
?
? IPv4: 1469437 2046M 1469429 2046M 8 487
?
? IPv6: 0 0 0 0 0 0
?
? TCP: 13 792 7 425 6 367
?
? UDP: 1469422 2046M 1469422 2046M 0 0
?
? ICMP: 2 120 0 0 2 120
?
? Other IP: 0 0 0 0 0 0
?
? Non-IP: 0 0 0 0 0 0
?
? ?
? ?
? Total rates: 0.0 kbits/secc Broadcast packets: 0
?
? 0.0 packets/sec Broadcast bytes: 0
?
? ?
? Incoming rates: 0.0 kbits/secc ?
? 0.0 packets/sec ?
? IP checksum errors: 0
?
? Outgoing rates: 0.0 kbits/sec ?
? 0.0 packets/sec
$ sudo /var/lib/pgsql/ntopng/ntopng -s -l -i p1p1 -d/var/tmp -w 3000 -n 0 -m
172.16.0.0/12,10.0.0.0/8,192.168.0.0/16
27/Jun/2013 09:59:34 [Redis.cpp:39] Succesfully connected to Redis 32 bit
v.2.6.13
27/Jun/2013 09:59:34 [Prefs.cpp:427] WARNING: Config file
/var/tmp/ntopng-users.conf not found (it will be created)
27/Jun/2013 09:59:34 [PF_RINGInterface.cpp:42] Reading packets from PF_RING
v.5.6.1 interface p1p1
--
Stephen Clark
*NetWolves*
Director of Technology
Phone: 813-579-3200
Fax: 813-882-0209
Email: [email protected]
http://www.netwolves.com
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
