Hi filippo, It works now.
Great thanks! John 在 2013年12月10日星期二，Filippo Fontanelli <[email protected]> 写道： > Hi John, > We have fixed your warning, > now you are able to override default port protocols using -p command line. > Please update your svn code and first try with the pcapReader and after with ntopng. > Best Regards > Filippo > > > On 09 Dec 2013, at 10:59, John Zhang <[email protected]> wrote: > > Thanks, Filippo. > Where is the default defined protocol list in ntopng? I cant change the port used by my application, may need change the default protocol list. > Your meaning is that this warning is the root cause of my problem? and if I avoid such warning, this issue can be fixed? > Thanks! > John > > 2013/12/9 Filippo Fontanelli <[email protected]> > > John, > Within nDPI we have defined some default protocol (port based) and then in your case: > if you use the port 5355, nDPI report a warning because you are redefining the port 5355 for you protocol but this port is already defined for the Link local Multicast Name Resolution ( http://en.wikipedia.org/wiki/Link-local_Multicast_Name_Resolution). > A simply solution to your problem would be to use a different port. > I'm planning to add to the guide a list of ports that are currently defined so as to avoid problems like this > Best Regards, > Filippo > On 09 Dec 2013, at 10:18, John Zhang <[email protected]> wrote: > > Thank you, Filippo. > i did follow the quick start guide you mentioned to add new custom protocol, but cant detect new traffic by ntopng and pcapreader. > Here paste my config files and log below, FYI. Hope they are useful. > 1.ntopng.conf > cat /etc/ntopng/ntopng.conf > -r=localhost:6379 > -w=3000 > -m="172.0.0.1/8" > -G=/var/tmp/ntopng.pid > -i=eth0 > -i=tcp://0.0.0.0:5556 > -p=/etc/ntopng/custome.protos >
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
