Well, the ports cant just be all random, everything (ok so not really but bear with me you'll see what I really mean) has to have at least one static port or range of ports to connect to other wise you wouldn't be able to establish any connection. I'm not sure what the first person to reply to this was talking about most applications have some documentation on what ports they use if for no other reason due to firewalls. If not however, you can use something like iptraf and break the lists down by port then figure out which ports you actually want to monitor. Keep in mind most originating ports *ARE* random but the destination are typically static or within some range.
You can make use of the /etc/*ntop*/*protocols.list file to add your own custom ports (including ranges) to move traffic out of the "other" group and into your custom groups. * On Mon, Oct 20, 2008 at 1:07 AM, Yuri Francalacci <[EMAIL PROTECTED]> wrote: > Skype (in example) and other file sharing protocols use non well-known > port protocol thus it is not so easy to detect them until it has been > found a way to decode the protocol. > Maybe this is the reason for your 55% if other traffic. > Yuri > > On 10/17/2008 07:45 PM, Frederik Niedernolte wrote: > > Is it possible that ntop checks for more protocols? > > > > I have 55% from Other TCP/UDP-based Protocols so ntop cannot help here :( > > > > I am using ntop v3.2. > > > > Thanks for help. > > > > > > > > Best regards, > > > > > > > > F. Niedernolte > > > > > > ------------------------------------------------------------------------ > > > > _______________________________________________ > > Ntop mailing list > > Ntop@unipi.it > > http://listgateway.unipi.it/mailman/listinfo/ntop > > -- > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > Yuri Francalacci > E-Mail: [EMAIL PROTECTED] Internet: http://www.ntop.org/ > *** Esse Quam Videri -- To Be, Rather Than To Seem *** > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > _______________________________________________ > Ntop mailing list > Ntop@unipi.it > http://listgateway.unipi.it/mailman/listinfo/ntop >
_______________________________________________ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
