|
Jan
do you mean nDPI is faulty or ntop is displaying bad data?
luca
On 04/09/2013 03:01 PM, Jan Krupa wrote:
Hi all,
I'm using latest vesion of ntop from repositories on Ubuntu server
12.04. I have two interfaces:
-eth0 for management
-eth1 for receiving mirrored traffic (leaving our network by edge
router)
When I set "capture interfaces" option to eth0 everything seems to
be working fine.
When I use eth1 for capturing it also seems to be working fine
except Summary->Traffic->Application Protocols option isn't
working properly.
I can see all the traffic on eth1 interface (checked by tcpdump -i
eth1), network load statistics and all other statistics seem to be
reporting proper volumes of traffic. However Application Protocols
graph only reports only minimal traffic. Interestingly it mainly
shows protocols like DNS, DHCP, NTP and NetFlow which would
indicate it only counts packets that are sourced/destined to the
edge router. On eth0 it seems to be recognizing all protocols.
Anyone else had such problem? Any help would be appreciated.
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
|
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
