Luca,
I have fixed the issue. If you are using interface without IP
address for sniffing, you have to set local subnets (-m) option.
Otherwise application data is not displayed.
On 04/10/2013 01:25 PM, Luca Deri wrote:
Jan
do you mean nDPI is faulty or ntop is displaying bad data?
luca
On 04/09/2013 03:01 PM, Jan Krupa wrote:
Hi all,
I'm using latest vesion of ntop from repositories on Ubuntu
server 12.04. I have two interfaces:
-eth0 for management
-eth1 for receiving mirrored traffic (leaving our network by
edge router)
When I set "capture interfaces" option to eth0 everything seems
to be working fine.
When I use eth1 for capturing it also seems to be working fine
except Summary->Traffic->Application Protocols option
isn't working properly.
I can see all the traffic on eth1 interface (checked by tcpdump
-i eth1), network load statistics and all other statistics seem
to be reporting proper volumes of traffic. However Application
Protocols graph only reports only minimal traffic. Interestingly
it mainly shows protocols like DNS, DHCP, NTP and NetFlow which
would indicate it only counts packets that are sourced/destined
to the edge router. On eth0 it seems to be recognizing all
protocols.
Anyone else had such problem? Any help would be appreciated.
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
|
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
