Hello All I am using nprobe v.6.13.130919 (pf_ring 5.6.0 with DNA) to record urls on port 80. However, when I compare the recorded urls to another program (“urlsnarf”) also recording urls from the same traffic (different server), I notice urls missing from what nprobe recorded.
There are no dropped packets being reported by nprobe (/proc/net/pf_ring/stats). I am running nprobe: nprobe -idna3@0 --dont-hash-cookies --http-dump-timeout 3000 --http-dump-dir /ocis/http/ --max-http-log-lines 100000 Many urls are being recorded but still some are missing. The missing ones to not immediately jump out as extremely large, etc. Any thoughts? Thank you! -Jeffrey Jeffrey Savoy, CISSP EnCE GREM Information Security Officer University of Wisconsin-Madison 608-262-8369
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
