Hi,
I believe there is currently no way in ntop (as of 2.0beta20011016-1, but I
guess not even in 2.0 proper) to distinguish between udp and tcp application
traffic.
The trafficStats.html page will merge tcp and udp traffic that uses the same
port (e.g. ftp and fsp traffic, tcp/21 and udp/21 respectively, will not be
distinguished).
I think it would be nice to be able to use a syntax like the following in
protocols.list:
ftp=tcp/21
fsp=udp/21
igmp=igmp
ping=icmp/8|icmp/0
vpn=gre|esp
So, effectively, I'm humbly requesting the following features:
- support of multi-line protocols.list files (i.e. using newline as
separator instead of a comma)
- support for specifying protocol as well as port number in protocols.list
- support for all IP-protocols (not only TCP, UDP and ICMP; see the 'vpn'
line above)
- support for ICMP message types (see the 'ping' line messages)
Is there a realistic probability that you'll implement these features in the
foreseeable future?
Thanks in advance,
Andrew
--
Andrew Korn (Korn Andras) <[EMAIL PROTECTED]>
Finger [EMAIL PROTECTED] for pgp key. QOTD:
Don't call for help at night - you might wake the neighbours.
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop
