I don't know how to reproduce the problem, but will be happy to see if I can get a trace. I'll assume for the moment that you need just the headers
For background info, the switch is an HP 3400cl, and the traffic is being monitored on port 48. Where do you want the capture sent? Kurt. On Wed, Jun 3, 2009 at 14:30, Luca Deri <d...@ntop.org> wrote: > > Kurt > perhaps there's a bug related to VLANs hence the top talkers are not on the > VLAN ntop represents. > > Do you know how to reproduce the problem? Can you offer a .pcap trace? > > Regards Luca > > On Jun 3, 2009, at 7:26 PM, Kurt Buff wrote: > >> All, >> >> How the heck do I find out what was happening here? >> >> >> 09:21 - 08:21 >> 54.6 Mbit/s >> >> 192.168.126.1 (vlan 110) >> 0.0 bit/s >> www.wstd.ups.com (vlan 108) >> 0.0 bit/s >> sunic.sunet.se (vlan 108) >> 0.0 bit/s >> >> 192.168.126.1 (vlan 110) >> 0.0 bit/s >> 192.168.127.1 (vlan 108) [IP] >> 0.0 bit/s >> mx3.surnet.cl (vlan 108) >> 0.0 bit/s >> >> I've got a spike to over 5mbits/s, but my talk talkers all read 0.0bits/s. >> I've got no filters active, but no way to find out what my top talkers >> really were. >> >> Anyone have a clue for me? >> _______________________________________________ >> Ntop mailing list >> Ntop@unipi.it >> http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > Ntop@unipi.it > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
