Unless you're talking a hardware sniffer, they should be equivalent, as all the
software sniffers (tcpdump, ethereal et al) I know of use the libpcap.
As long as it's not dropping packets, ntop should see all valid packets. Whether it
counts them all in SOME bucket would require a line by line audit of pbuf.c - go for
it <grin/>.
As to PP2P, there's nothing I'm aware of in the code for it. If it fits the basic
model, you could easily add it:
main.c: 1170 addNewIpProtocolToHandle("IPSEC", 50, 51);
-----Burton
---------- Original Message ----------------------------------
From: "B. Loic" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Tue, 09 Sep 2003 10:20:08 +0200
>Thomas Pagel a �crit :
>
>> Just anonther question: The traffic ntop shows under "other" is this really all
>> other traffic? We have a second VPN running on Microsoft RRAS, this traffic appears
>> on "other"... Or the other way round: is the sum of what I see on ntop's traffic
>> pages really the sum of all traffic on the wire? I'm aware of the hub/switch
>> problem, we have ntop running on a hub... Is there anything which isn't counted at
>> all?
>
>If you're interrested in the traffic counted as "other", maybe a patch I posted on
>the ntop-dev mailing-list a few days ago will be useful to you. It adds a -j option
>to ntop which, when set, attempts to dump to a pcap file all the packets that ntop
>counts as "other".
>Then you can feed this file into a sniffer like ethereal to analyse its contents. If
>you find out that some traffic is missing, it can be either that my patch is buggy
>(in that case, please let me know) or that ntop doesn't see all traffic.
>
>You could also have ntop dump all the packets it sees (there's an option for that
>too), use a sniffer to capture traffic in another file, and compare the two...
>
>Lo�c
>
>
>_______________________________________________
>Ntop mailing list
>[EMAIL PROTECTED]
>http://listgateway.unipi.it/mailman/listinfo/ntop
>
____________________________________________________________
Free 20MB Web Site Hosting and Personalized E-mail Service!
Get It Now At Doteasy.com http://www.doteasy.com/et/
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
