Hi, When we installed Ntop I turned on RRD to full detail on all hosts, domains and interfaces. My dropped packages were with Fedora Core2 at 80% as well. I turned of the RRD feature and now only loose 0.1% !! I think it is simply IO related, the box was crunching so much IO's to the hard disk that the NIC card didn't got enough...
So, try limit or turning off RRD and see how it works. My ntop dies after 24 hours without anything in the log. I want to try the PF_Ring stuff...but I am not really that good in Linux, so it will take me some reading before I can attempt compiling my own kernel and report back. - Swen -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Carder Sent: Monday, October 11, 2004 1:48 PM To: '[EMAIL PROTECTED]' Subject: [Ntop] Dropped packets After having the mirroring port on our core switch take down our core switch I moved our ntop box to a switch that is outside our firewall that sees allot less traffic. The switch is doing fine but I am still having a problem with libpcap dropping packets. When the box was on our core switch I say libpcap dropping roughly 80% of the packets, now I am seeing roughly 50% of the packets being dropped. I know this isn't necessarily a problem with ntop but I was wondering if anyone on the list might have any recommendation on getting libpcap's drop ratio down. Thanks in advance for any help. Here are the system specs: Dell GL250: 2.5 GHZ Pentium III 512 megs of ram OS: Freebsd 5.2.1 Nic: Intell 10/100 (running at 100FullDuplex) _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
