-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Burton Strauss Sent: Saturday, July 29, 2006 1:13 PM To: [email protected] Subject: RE: [Ntop] Packet Format Question
Depends. A lot of layer two stuff is in the code. If you want to make the appropriate code change, the best model is probably VLAN (which is also a fixed length header at layer 2). That discussion belongs on ntop-dev. -----Burton (Please note that I am speaking only as an individual and not as a representative of my employer) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Constantine, Barry Sent: Wednesday, July 19, 2006 9:54 AM To: '[email protected]' Subject: [Ntop] Packet Format Question I would like to use ntop to characterize data on a private government network. The format of the protocol stack is somewhat proprietary, although it is being run on an Ethernet network with IP. The catch is that a proprietary "shim" header is present between the Ethernet and IP headers (kind of like MPLS, but proprietary). Will ntop report the network traffic as "Ethernet - Unknown / Other" or does it search for the IP Header independent of the Ethernet Next Protocol field? Thanks, Barry _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
