Jan,
i may be wrong but if the feeded data is netflow nDPI can't do nothing
to detect the applications, as the payload is not in the netflow packet.
if you produce netflow data with the csco box it is nbar in charge to
recognize the applications, if you use a different probe it up to the
proble to inspect the layer7 (o upper layer) applications.
ciao
Il 27/12/2012 17:16, Jan Speksnijder ha scritto:
Hi,
I'm using Netflow data to feed ntop fir win32 v5.0.2.
How effective is nDPI to detect applications?
With the detaults ntop v5 detects fewers applications as v3.2 with an
expanded protocols.list.
What is the most effective configuration for ntop v5 when using
Netflow to feed ntop?
Jan
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
