Hello everybody,
Im testing last NTop stable 5.0.2 with PF_RING from the ubuntu x64
packages in a Ubuntu 12.04 TLS 64bit version.
The box is a Dual Xeon 2.8GHz (2 physical cores) with 2Gb RAM with a
RAID 1 SCSI 10k rpm 40Gb hard drive.
I have NTop in a mirroed switch port monitoring a 100Mb/s average
network. Peak is about 200Mb/s
Im having some issues with libpcap packet dropping and also with nDPI.
In less of an hour running ntop, I have:
Dropped (libpcap) 44.8% 16,262,915
Dropped (ntop) 0.0% 0
Total Received (ntop) 36,289,290
Total Packets Processed 36,289,291
WIth pfcount -i eth1 there is no packet drop.
And in the Application Protocol TAB arround 40~50% of traffic is unknow
while http and bittorrent are really low. HTTP have an average of 30Mb/s
and Bittorrent have 3Mb/s average. And Im very sure there are more of those.
I tried opendpi_netfilter before (nDPI based sources) and bittorrent was
arround 40MBit and http arround 60Mbit
Also some things dont work for me. Like:
IP -> Local -> Network Traffic Map | this keep loading while dot is
consuming 100% CPU
In the Interface Report TAB, Remote Host Distance graph draw a very big
legend that goes from upper graph to bottom graph.
Im doing something wrong?
Thanks in advance.
PS: Sorry for my english
--
Daniel Baeza
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
