ntopng decapsulates GRE tunnels by default. nprobe needs the following option
to account for decapsulated traffic:
[--tunnel|-5] | Compute flows on tunnelled traffic rather
than
| on the external envelope
Simone
> On 28 Feb 2018, at 18:28, Rokkhan <[email protected]> wrote:
>
> Hi,
>
> I am sending traffic to one of the ntop interfaces with ERSPAN but traffic
> info shows application as "GRE".
>
> ¿Coudl it be configured to inspect the traffic inside the ERSPAN and show the
> real application?
>
> Saludos.
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
