Hi Luca, We have monitoring server that receives packets on UDP port 14050. I have set up a protos.txt file like this: $ cat /var/lib/ntop/protos.txt udp:14050@SRM2 tcp:1494,tcp:2598,tcp:2512,tcp:2513@CITRIX tcp:3000@ntop
I know my file is being read because I get [NDPI] addDefaultPort(): found duplicate for port 1494 [NDPI] addDefaultPort(): found duplicate for port 2598 Showing duplicates on these citrix ports. But when I go to my server the flows->application always just shows up as (Too Early). Info (Too Early) UDP 209.xxx.xxx.xxx:37759 srm2.netwolves.com:14050 1 sec 0 bps 1.55 KB The UDP packets only come every couple of minutes from the remote units. On the old NTOP this used to show up correctly as SRM2. Ideas? Thanks, -- Stephen Clark *NetWolves* Director of Technology Phone: 813-579-3200 Fax: 813-882-0209 Email: [email protected] http://www.netwolves.com
_______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
