As you can see from https://github.com/ntop/ntopng/blob/dev/src/NetworkInterface.cpp#L1521 <https://github.com/ntop/ntopng/blob/dev/src/NetworkInterface.cpp#L1521> ntopng decapsulates GRE traffic. Are you using the latest version? Can you enclose a pcap file so we can try and reproduce?
> On 1 Mar 2018, at 20:40, Rokkhan <[email protected]> wrote: > > Hi, > I am using ntopng and it shows traffic flows as gre, instead of the real > traffic. > Do i have to enable any option? > Greetings > > > El 1 mar. 2018 20:35, "Simone Mainardi" <[email protected] > <mailto:[email protected]>> escribió: > ntopng decapsulates GRE tunnels by default. nprobe needs the following option > to account for decapsulated traffic: > > [--tunnel|-5] | Compute flows on tunnelled traffic > rather than > | on the external envelope > > > Simone > > > On 28 Feb 2018, at 18:28, Rokkhan <[email protected] > > <mailto:[email protected]>> wrote: > > > > Hi, > > > > I am sending traffic to one of the ntop interfaces with ERSPAN but traffic > > info shows application as "GRE". > > > > ¿Coudl it be configured to inspect the traffic inside the ERSPAN and show > > the real application? > > > > Saludos. > > _______________________________________________ > > Ntop mailing list > > [email protected] <mailto:[email protected]> > > http://listgateway.unipi.it/mailman/listinfo/ntop > > <http://listgateway.unipi.it/mailman/listinfo/ntop> > > _______________________________________________ > Ntop mailing list > [email protected] <mailto:[email protected]> > http://listgateway.unipi.it/mailman/listinfo/ntop > <http://listgateway.unipi.it/mailman/listinfo/ntop>_______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
