> ntop has the ability to read packet captures to help w/ debugging. We don't > try to sync time or anything. Just process packets from the file and > display reports.
Burton, What do you mean we don't try to sync time or anything? Do you mean the time it took to collect the data might not reflect the time it takes ntop to read the file or that the statistics might be off after ntop reads the data from the pcap file? I was just planning to take a PCAP of a a 15 minute period done at around 4AM while our programmers test a new streaming video tool. I was planning to be able to to feed that into a non-production ntop sensor the next day for analysis. Are those numbers going to be accurate? If not i guess i can use tcpreplay. Thanks! -Seth _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
