Steve please send me the pcap I asked you Luca
On Oct 11, 2013, at 9:03 PM, Steve Clark <[email protected]> wrote: > Hi Luca, > > at least one is correct > > <cihabffi.png> > > On 10/11/2013 02:54 PM, Steve Clark wrote: >> Hi Luca, >> >> I updated nDPI did a gmake >> cd .. >> gmake clean >> gmake >> >> but I am still seeing: >> <Mail Attachment.png> >> >> Do I have to clear the rrd files or the redis server? >> >> >> >> On 10/11/2013 02:17 PM, Steve Clark wrote: >>> Thanks a bunch Luca, I'll give it a try. >>> >>> On 10/11/2013 12:43 PM, Luca Deri wrote: >>>> Steve, >>>> I have added that port. Maybe is enough. Please try this. You need to >>>> update nDPI then recompile ntopng >>>> >>>> Cheers Luca >>>> >>>> On Oct 11, 2013, at 5:09 PM, Steve Clark <[email protected]> wrote: >>>> >>>>> Hi Luca, >>>>> >>>>> Is there some reason this can't be identified from the fact it is UDP to >>>>> well know port 4500? >>>>> >>>>> The whole ipsec nat-t specification is defined in an RFC. >>>>> http://tools.ietf.org/html/rfc3947 >>>>> >>>>> I can get a tcpdump but I don't control the endpoints so it will >>>>> difficult to get the >>>>> initiation part, would that help? >>>>> >>>>> On 10/11/2013 09:48 AM, Luca Deri wrote: >>>>>> Steve >>>>>> all protocols in nDPI should be reliable with the exception of Skype and >>>>>> Bittorrent that have some heuristic as you can see. Please provide me a >>>>>> trace (full packet size) in pcap format and I will debug this problem >>>>>> >>>>>> Luca >>>>>> >>>>>> On Oct 11, 2013, at 2:30 PM, Steve Clark <[email protected]> wrote: >>>>>> >>>>>>> Hi Luca, >>>>>>> >>>>>>> nDPI is mis- identifying ipsec nat-t traffic as skype - port 4500 is >>>>>>> the default port for ipsec nat-t. >>>>>>> >>>>>>> https://supportforums.cisco.com/docs/DOC-16591 >>>>>>> >>>>>>> >>>>>>> <ccacjghd.png> >>>>>>> >>>>>>> -- >>>>>>> Stephen Clark >>>>>>> NetWolves >>>>>>> Director of Technology >>>>>>> Phone: 813-579-3200 >>>>>>> Fax: 813-882-0209 >>>>>>> Email: [email protected] >>>>>>> http://www.netwolves.com >>>>>>> _______________________________________________ >>>>>>> Ntop-dev mailing list >>>>>>> [email protected] >>>>>>> http://listgateway.unipi.it/mailman/listinfo/ntop-dev >>>>>> >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> Ntop-dev mailing list >>>>>> [email protected] >>>>>> http://listgateway.unipi.it/mailman/listinfo/ntop-dev >>>>> >>>>> >>>>> -- >>>>> Stephen Clark >>>>> NetWolves >>>>> Director of Technology >>>>> Phone: 813-579-3200 >>>>> Fax: 813-882-0209 >>>>> Email: [email protected] >>>>> http://www.netwolves.com >>>>> _______________________________________________ >>>>> Ntop-dev mailing list >>>>> [email protected] >>>>> http://listgateway.unipi.it/mailman/listinfo/ntop-dev >>>> >>>> >>>> >>>> _______________________________________________ >>>> Ntop-dev mailing list >>>> [email protected] >>>> http://listgateway.unipi.it/mailman/listinfo/ntop-dev >>> >>> >>> -- >>> Stephen Clark >>> NetWolves >>> Director of Technology >>> Phone: 813-579-3200 >>> Fax: 813-882-0209 >>> Email: [email protected] >>> http://www.netwolves.com >>> >>> >>> _______________________________________________ >>> Ntop-dev mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop-dev >> >> >> -- >> Stephen Clark >> NetWolves >> Director of Technology >> Phone: 813-579-3200 >> Fax: 813-882-0209 >> Email: [email protected] >> http://www.netwolves.com >> >> >> _______________________________________________ >> Ntop-dev mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-dev > > > -- > Stephen Clark > NetWolves > Director of Technology > Phone: 813-579-3200 > Fax: 813-882-0209 > Email: [email protected] > http://www.netwolves.com
_______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
