Stefano,
Strange enough some applications are detected like: HTTP, SSL, HTTP Proxy,
Citrix and the default applications DNS, Netbios, Mail, NFS/AFS and DHCP.
I use rflow, this is a Netflow implementation in the DD-WRT open source
router.
If Netflow cannot give the required information for nDPI, I hope Luca Deri
will re-enable the use of the -p protocol.list option in ntop.
ciao
----- Original Message -----
From: "Stefano Bianchi" <[email protected]>
To: <[email protected]>
Sent: Friday, December 28, 2012 12:08 PM
Subject: Re: [Ntop] Netflow and ntop, nDPI and/or protocol.list?
Jan,
i may be wrong but if the feeded data is netflow nDPI can't do nothing to
detect the applications, as the payload is not in the netflow packet.
if you produce netflow data with the csco box it is nbar in charge to
recognize the applications, if you use a different probe it up to the
proble to inspect the layer7 (o upper layer) applications.
ciao
Il 27/12/2012 17:16, Jan Speksnijder ha scritto:
Hi,
I'm using Netflow data to feed ntop fir win32 v5.0.2.
How effective is nDPI to detect applications?
With the detaults ntop v5 detects fewers applications as v3.2 with an
expanded protocols.list.
What is the most effective configuration for ntop v5 when using Netflow
to feed ntop?
Jan
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
