Hello, Currently using:
ntopng (ntopng_1.0.1-6754_amd64.deb) nprobe (nprobe_6.14.130907-3654_amd64.deb) When viewing flows in ntopng, the port numbers all appear incorrect (potential endianness problem?): Info Unknown TCP x.x.x.x:47873 192.168.1.102:58599 24 min, 20 sec 0 bps 196.49 KB Info Unknown TCP x.x.x.x:20480 192.168.1.102:9457 19 min, 10 sec 0 bps 105.64 KB These should be ports 80 and 443. This, of course, affects the protocols reporting (100% reported as Unknown). I've checked the netflows being generated at the origin and the ports are being reported correctly to nprobe. Has anyone else had this issue? -- Max
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
