Jan, please send me some full packets flows that are not recognized so I can add support for them into nDPI.
-p is not bad per se, but I think it should rather go into nDPI (and not ntop) so that all apps using nDPI can benefit from it. Regards Luca On Dec 28, 2012, at 1:20 PM, Jan Speksnijder <[email protected]> wrote: > Stefano, > > Strange enough some applications are detected like: HTTP, SSL, HTTP Proxy, > Citrix and the default applications DNS, Netbios, Mail, NFS/AFS and DHCP. > I use rflow, this is a Netflow implementation in the DD-WRT open source > router. > If Netflow cannot give the required information for nDPI, I hope Luca Deri > will re-enable the use of the -p protocol.list option in ntop. > > ciao > > ----- Original Message ----- From: "Stefano Bianchi" > <[email protected]> > To: <[email protected]> > Sent: Friday, December 28, 2012 12:08 PM > Subject: Re: [Ntop] Netflow and ntop, nDPI and/or protocol.list? > > >> Jan, >> >> i may be wrong but if the feeded data is netflow nDPI can't do nothing to >> detect the applications, as the payload is not in the netflow packet. >> >> if you produce netflow data with the csco box it is nbar in charge to >> recognize the applications, if you use a different probe it up to the proble >> to inspect the layer7 (o upper layer) applications. >> >> ciao >> >> >> Il 27/12/2012 17:16, Jan Speksnijder ha scritto: >>> Hi, >>> I'm using Netflow data to feed ntop fir win32 v5.0.2. >>> How effective is nDPI to detect applications? >>> With the detaults ntop v5 detects fewers applications as v3.2 with an >>> expanded protocols.list. >>> What is the most effective configuration for ntop v5 when using Netflow to >>> feed ntop? >>> Jan >>> >>> >>> _______________________________________________ >>> Ntop mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
