ntopng decapsulates GRE tunnels by default. nprobe needs the following option to account for decapsulated traffic:
[--tunnel|-5] | Compute flows on tunnelled traffic rather than | on the external envelope Simone > On 28 Feb 2018, at 18:28, Rokkhan <rokk...@gmail.com> wrote: > > Hi, > > I am sending traffic to one of the ntop interfaces with ERSPAN but traffic > info shows application as "GRE". > > ¿Coudl it be configured to inspect the traffic inside the ERSPAN and show the > real application? > > Saludos. > _______________________________________________ > Ntop mailing list > Ntop@listgateway.unipi.it > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list Ntop@listgateway.unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop