Please, Explain how to reproduce and how you are delivering traffic to ntopng. It could be that the first SYN packet of the flow hasn't been seen - indeed, I don't see any SYN in the server -> client TCP flags - so ntopng has been tricked into thinking the server (who actually responded with a SYN+ACK) is the client.
This happens because a new flow gets it client and server assigned depending on the first seen packet. Simone > On 22 Jan 2020, at 11:11, Christophe Gierski <[email protected]> wrote: > > Dear all, > > I have installed NTopNG 3.8.200120 - Enterprise Edition on Ubuntu 18.04.2 LTS > > And It seems there is error as the flow display information between same > machine and seems to invert Client/Server. > > <image003.png> > > > > > Thx & Rgds, > Christophe. > > > _______________________________________________ > Ntop mailing list > [email protected] <mailto:[email protected]> > http://listgateway.unipi.it/mailman/listinfo/ntop > <http://listgateway.unipi.it/mailman/listinfo/ntop>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
