Loic,

Quite interesting... Unfortunately I'm using the Windows version, so I can't use your 
new feature until Luca will add it to his Windows distribution...


Thanks


Thomas Pagel
Senior Consultant Business Intelligence 

Software4You Planungssysteme GmbH
Niederlassung Paderborn 
Hauptstra�e 35 
33178 Borchen (Germany)
 
tel.:   +49 (5251) 54009-11
mob.:   +49 (172) 8423035
fax.:   +49 (5251) 54009-99
home:   http://www.software4you.com

4PLAN� - The Art of Budgeting. 

Disclaimer: 
This email may contain confidential and proprietary material for the sole use of the 
intended recipient. 
Any review or distribution by others is prohibited. 
If you are not the intended recipient please contact the sender and delete all copies. 



-----Urspr�ngliche Nachricht-----
Von: B. Loic [mailto:[EMAIL PROTECTED] 
Gesendet: Dienstag, 9. September 2003 10:20
An: [EMAIL PROTECTED]
Betreff: Re: AW: [Ntop] Protocolls not recognized by ntop


Thomas Pagel a �crit :

> Just anonther question: The traffic ntop shows under "other" is this 
> really all other traffic? We have a second VPN running on Microsoft 
> RRAS, this traffic appears on "other"... Or the other way round: is 
> the sum of what I see on ntop's traffic pages really the sum of all 
> traffic on the wire? I'm aware of the hub/switch problem, we have ntop 
> running on a hub... Is there anything which isn't counted at all?

If you're interrested in the traffic counted as "other", maybe a patch I posted on the 
ntop-dev mailing-list a few days ago will be useful to you. It adds a -j option to 
ntop which, when set, attempts to dump to a pcap file all the packets that ntop counts 
as "other". Then you can feed this file into a sniffer like ethereal to analyse its 
contents. If you find out that some traffic is missing, it can be either that my patch 
is buggy (in that case, please let me know) or that ntop doesn't see all traffic.

You could also have ntop dump all the packets it sees (there's an option for that 
too), use a sniffer to capture traffic in another file, and compare the two...

Lo�c


_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to