Dear all I found ntop when dealing with an issue whereby the full internet link capacity (10 Mbps) was utilised for hours on end. Very useful tool! It helped me to isolate the problem to a misbehaving Apple Mail program trying to continuously sync a very large IMAP mailbox.
I have installed ntop on Debian 7.1 with the standard ntop from the Debian repo's (v.4.99.3 - 32bit). I noticed that the Application Protocols tab appears to lack some information. If I compare the graph for IMAP traffic (Mail_IMAP) with that which I see using tcpdump (on the same interface) and with ntop's Network Load chart, the large volume of IMAP traffic is missing from the Application Protocols tab. So: - tcpdump shows the IMAP traffic - ntop's Network Load traffic shows 10 Mbps continuous charge - Application Protocols page shows practically zero IMAP traffic (0.5 Bytes/s continuously). I have started ntop specifying the local subnets (-m), but that didn't appear to help. Any ideas? _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
