Hi all,

I'm using latest vesion of ntop from repositories on Ubuntu server 12.04. I have two interfaces:
-eth0 for management
-eth1 for receiving mirrored traffic (leaving our network by edge router)

When I set "capture interfaces" option to eth0 everything seems to be working fine.
When I use eth1 for capturing it also seems to be working fine except Summary->Traffic->Application Protocols option isn't working properly.
I can see all the traffic on eth1 interface (checked by tcpdump -i eth1), network load statistics and all other statistics seem to be reporting proper volumes of traffic. However Application Protocols graph only reports only minimal traffic. Interestingly it mainly shows protocols like DNS, DHCP, NTP and NetFlow which would indicate it only counts packets that are sourced/destined to the edge router. On eth0 it seems to be recognizing all protocols.

Anyone else had such problem? Any help would be appreciated.


--
Pozdrawiam,
Jan Krupa
netsystems
tel. 12 2528604
www.ntss.pl
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to