Please, Explain how to reproduce and how you are delivering traffic to ntopng. It could be that the first SYN packet of the flow hasn't been seen - indeed, I don't see any SYN in the server -> client TCP flags - so ntopng has been tricked into thinking the server (who actually responded with a SYN+ACK) is the client.
This happens because a new flow gets it client and server assigned depending on the first seen packet. Simone > On 22 Jan 2020, at 11:11, Christophe Gierski <c.gier...@traxens.com> wrote: > > Dear all, > > I have installed NTopNG 3.8.200120 - Enterprise Edition on Ubuntu 18.04.2 LTS > > And It seems there is error as the flow display information between same > machine and seems to invert Client/Server. > > <image003.png> > > > > > Thx & Rgds, > Christophe. > > > _______________________________________________ > Ntop mailing list > Ntop@listgateway.unipi.it <mailto:Ntop@listgateway.unipi.it> > http://listgateway.unipi.it/mailman/listinfo/ntop > <http://listgateway.unipi.it/mailman/listinfo/ntop>
_______________________________________________ Ntop mailing list Ntop@listgateway.unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
