Hi,
I'm under the impression that ntop's application level protocol summation
doesn't distinguish between outgoing and incoming traffic. It only uses the
port number on the remote host to determine the 'protocol'.
Is this assumption correct?
What I'd like to do is use ntop to create some nice charts of traffic
distribution on a webserver that also does other things than serving http.
I expect to see a separate chart for 'outgoing' and for 'incoming' traffic,
where protocols are distinguised by remote and local port numbers
respectively.
E.g. everything that goes out from our local port 80 is outgoing http.
Everything that comes in from a remote port 80 is incoming http. And so on.
Did you consider implementing such a feature?
It would also be nice if ntop could produce statistics of IP protocol
distribution (i.e. TCP/UDP/ICMP/IGMP/RSVP/etc).
Andrew
--
Andrew Korn (Korn Andras) <[EMAIL PROTECTED]>
Finger [EMAIL PROTECTED] for pgp key. QOTD:
Monday is a hard way to spend one seventh of your life.
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop
