Hi folks,
I have a problem with the pcap-log feature. The file generated by ntop seems corrupted. If I trying to open it with Ntop (-f) it reports "bogus savefile header" (both with 4.0 e 4.0.1 versions). Others tool (tshark, tcpdump) reports: "pcap: File has 4294967295-byte packet, bigger than maximum of 65535". If I generate a pcap file with tcpdump, Ntop could correctly load(-f) and decode it. I have noticed that if I launch Ntop without -d or if I shoutdown Ntop from the GUI when in daemon mode, the file is still corrupted but I can read some packet from it. The workaround for my problem is to start a capture in parallel with Ntop but I think that with heavy traffic this is not the best solution. I have searched in the mailing list but I have not found any real solution to the problem despite a large number of posts on the argument. Thanks for help Daniele
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
