Interesting.
I would be curious to know the results of a ping of the broadcast
address , ie.. do you get duplicates, Also is your traffic all unicast
or multicast, TCP or UDP, and what kind of broadcasting is going on?
Maybe you could put up a few fake diagrams or something
indicating your network layout in more detail than you have here.
If your other boxes running ntop work correctly and provide
accurate stats then one must assume that either A ..you have a bad box..
or B .. traffic is truly different in that particular area.
Try moving one of the boxes you know works accuratly into the
same network position as your problem box.. and see what happens.., if
you've already done this.. take a look at your NIC's and compare them
using ifconfig
And please let us know.. i might just have the same type of
problem.
Thanks
Madhav Diwan
-----Original Message-----
From: [EMAIL PROTECTED]
Sent: Thu 6/21/2001 10:29 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: [Ntop] NTOP Stats reporting wrong...
Hello All,
I've been running NTOP for about a year now. I've mostly
had great
luck with it. I currently have NTOP compiled and running on a
number of
systems and all but one work properly. The one that does not
work reports
4 times the traffic than is actually going across it's path. To
confirm
this I have used two other NTOP boxes and the stats from the
firewall I'm
monitoring.
I have tried recompiling a number of time with newer CVS drops
and the
released stable beta2. I've even gone as far as to compare
TCPDump capture
files. The TCPDump files are the same, but NTOP reports 4 time
the actual.
Any ideas? Thanks all.
--
J. Eric Josephson
978-720-2159
mailto:[EMAIL PROTECTED]
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop
Note: The information contained in this message may be privileged and confidential and
protected from disclosure. If the reader of this message is not the intended
recipient, or an employee or agent responsible for delivering this message to the
intended recipient, you are hereby notified that any dissemination, distribution or
copying of this communication is strictly prohibited. If you have received this
communication in error, please notify us immediately by replying to the message and
deleting it from your computer. Thank you. Wagner Weber & Williams
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop
