I will do that after I get some lunch - but do you know what an sflow packet is supposed to look like? After the UDP header, it doesn't look like much to me, and I haven't been able to find a clear description of how the packet is supposed to be structured.
On 11/3/10 13:49 , "Alex DEKKER" <[email protected]> wrote: > On Wednesday 03 November 2010 20:38:41 Gary Gatten wrote: >> Notice total packets and ipv4 packets are both about 8.69M, but 34GB and >> 12GB respectively? Weird. >> >> You're using sflow. Would it be possible to connect to a SPAN port, tap, >> etc. and use libpcap as a test? I'd be curious if ntop classifies the >> traffic the same as it does when using sflow... > > Or even open some of the sflow packets in Wireshark and see what's in there. > > alexd > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop Barnaby Cockcroft / System Administrator, BuzzMedia / p 323 472 6400 f 323 466 0150 m 323 551 8878 ---------------------------------------------------------------------------- ----------------------------------------- 6464 Sunset Boulevard Ste 650, Hollywood, CA 90028 BUZZNET / Stereogum / The Hype Machine / Idolator / Absolute Punk / BritneySpears.com / Lyrics.com / Friends or Enemies / The Gauntlet / The Dougie / Vampire Freaks CELEBUZZ / The Superficial / What Would Tyler Durden Do / JustJared / JustJared Jr. / Socialite Life / Go Fug Yourself / Concrete Loop / Videogum / Celebslam / KimKardashian.com / NicoleRichie.com / KendraWilkinson.com / KhloeKardashian.com / KourtneyKardashian.com / BrodyJenner.com / WhitneyPort.com / AudrinaXO.com / MischaBarton.com / Splash News Online / Pacific Coast News Online _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
