Hi,
I have some problems with getting the right informations about my
network traffic with ntop on Debian Squeeze.
Can ntop see the different between sport and dport?
What can be non-ip? We got 32GB non-ip traffic in 2 weeks which is about
34% of our complete traffic. I think i cant be Spanning tree oder
somthing like that.
We have an IPsec Connection with racoon. Maybe ntop count the traffic
twice? (encrypted / clear text)
In the Protocol List is an entry that called "Messanger". We have over
40 gb traffic for this without running any Services on this Ports:
Messenger=1863|5000|5001|5190-5193|
thanks and regards
Tobias
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
