Dan
Looks very strange. Would you like to share some traffic with me (pcap traces 
full packets size) so we can analyze the problem?

Thanks, Luca

Sent from my iPad

On 22/gen/2012, at 22:00, Dan Letkeman <[email protected]> wrote:

> I have done that, and I am running 4.1.2 now and I get the same
> results.  99 Percent of the traffic is unknown.
> 
> Dan.
> 
> On Mon, Jan 16, 2012 at 12:03 AM, Luca Deri <[email protected]> wrote:
>> Joe
>> move to the not code that's on SVN that includes DPI for detecting 
>> application protocols
>> 
>> Luca
>> 
>> On Jan 16, 2012, at 4:55 AM, JoeSox wrote:
>> 
>>> Dan,
>>> Take a look at /etc/services and /etc/ntop/protocols.list
>>> 
>>> --
>>> Thanks, Joe
>>> 
>>> 
>>> 
>>> On Fri, Jan 6, 2012 at 11:24 PM, Dan Letkeman <[email protected]> wrote:
>>>> Hello,
>>>> 
>>>> I'm running ntop 4.1 and under the application protocols 99 percent of
>>>> my traffic is "unknown"  Is there something in ntop that I need to
>>>> configure for it to show actual protocols?
>>>> 
>>>> My stats from Nbar on my router show the correct traffic types:
>>>> 
>>>> http                     8165579                  8491415
>>>>                         7974473569               6381708267
>>>>                         38000                    25000
>>>>                         4072000                  6746000
>>>> bittorrent               75570                    11086237
>>>>                         12205219                 11460490659
>>>>                         0                        808000
>>>>                         47000                    7459000
>>>> s_nntp                   1471448                  3145586
>>>>                         89650260                 4641267954
>>>>                         0                        0
>>>>                         137000                   6910000
>>>> secure-http              1906435                  3336131
>>>>                         488447787                4231133037
>>>>                         2000                     1000
>>>>                         593000                   5900000
>>>> proxy_http               4768840                  8131624
>>>>                         475784131                10038749884
>>>>                         2000                     39000
>>>>                         139000                   4685000
>>>> skype                    5629449                  6570913
>>>>                         1136440559               3290066416
>>>>                         149000                   480000
>>>>                         271000                   3605000
>>>> ftp                      24310                    39617
>>>>                         13255135                 51374568
>>>>                         0                        0
>>>>                         319000                   1082000
>>>> smtp                     159856                   193563
>>>>                         110076218                211852867
>>>>                         0                        0
>>>>                         551000                   640000
>>>> groupwise                479797                   399518
>>>>                         378956941                140708542
>>>>                         0                        0
>>>>                         856000                   166000
>>>> rtp                      500974                   549035
>>>>                         37847420                 323222517
>>>>                         0                        0
>>>>                         28000                    409000
>>>> unknown                  30050890                 28836892
>>>>                         7889108852               24222198548
>>>>                         129000                   23000
>>>>                         3766000                  9114000
>>>> Total                    55075100                 72664137
>>>>                         19004103685              65557342431
>>>>                         325000                   1383000
>>>>                         11358000                 47686000
>>>> _______________________________________________
>>>> Ntop mailing list
>>>> [email protected]
>>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>> _______________________________________________
>>> Ntop mailing list
>>> [email protected]
>>> http://listgateway.unipi.it/mailman/listinfo/ntop
>> 
>> ---
>> We can't solve problems by using the same kind of thinking we used when we 
>> created them - Albert Einstein
>> 
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to