If for some reason, ntop can't see the PORT command, it's not going to
classify the traffic as passive ftp.
Otherwise, nothing obvious comes to mind.
Is there a notion of timeout, or session or a limitation due to the fact that I only observe local traffic?.
Thanks
Dom
-----Burton
-----Original Message-----
From: Dominique Lalot [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 17, 2003 12:18 AM
To: Burton M. Strauss III
Subject: RE: [Ntop] ftp passive
A 17:55 16/06/2003 -0500, vous avez �crit :
Since ntop doesn't see the packets using netflow, there's no way to id
passive traffic. Read the back traffic concerning the 2.2 ./configure
option --enable-netflowassumeftpdata.
Hello Burton,
Are you speaking about cisco netflow ?. I have nothing of that in my
configuration here.
It seemed that there is no fix about GDC_out_pie in the 2.2.0 branch in CVS.
Is it possible to add it, so I can get something stable?.
Thanks
Dominique
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Dominique Lalot
Sent: Monday, June 16, 2003 7:36 AM
To: [EMAIL PROTECTED]
Subject: [Ntop] ftp passive
Hello,
May be it's a FAQ. I only get a few messages about it using a google search.
I have a pure FTP server on my network, and FTP is less than 20% of TCP
protocol. I guess that all the rest is FTP passive.
Is there something to do to activate the search of FTP passive connections?.
Thanks
Dominique
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
