If you don't NEED v9, I'd stick with v5. v9 flows have the capability to do a LOT of cool stuff, but if the fields aren't populated and / or the collector / analysis tool doesn't make use of them - then they're worthless.
I plan to dig into v9, as mentioned Ci$co has some usefully stuff planned - primarily some data enrichment through NBAR. But other stuff too. Hopefully nTop developers will jump on the new stuff! ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Cain, Bill (DIS) Sent: Friday, March 26, 2010 10:48 AM To: [email protected] Subject: Re: [Ntop] ntop warning, are they significant? What is the cause? It is V9, just confirmed. From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Friday, March 26, 2010 8:40 AM To: '[email protected]' Subject: Re: [Ntop] ntop warning, are they significant? What is the cause? To my knowledge, v5 flows don't have "template's". To your original question though, I can't say if they're "significant" or not. I usually run some test traffic of known quantities, throughputs, ports, etc. and if nTop correctly reports it - I'm happy :) G ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Cain, Bill (DIS) Sent: Friday, March 26, 2010 10:31 AM To: [email protected] Subject: Re: [Ntop] ntop warning, are they significant? What is the cause? Believe V5 flows, but will have to check a config to be sure. Cisco Catalysis 6.5K From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Friday, March 26, 2010 8:29 AM To: '[email protected]' Subject: Re: [Ntop] ntop warning, are they significant? What is the cause? Got me on this one. I still use v5 flows - is this v9 stuff? ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Cain, Bill (DIS) Sent: Friday, March 26, 2010 10:26 AM To: [email protected] Subject: [Ntop] ntop warning, are they significant? What is the cause? Our these warning significant- Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=619][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=660][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=701][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=742][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=783][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=824][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=865][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=906][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=947][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=988][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=1029][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=1070][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=1111][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=1152][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=1193][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=1234][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=1275][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=1316][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=1357][flow_len=1400] Fri Mar 26 08:24:35 2010 **WARNING** Template len mismatch [tot_len=45][flow_len=1400] Bill Cain NTop Admin
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
