Thomas Pagel a �crit : > Just anonther question: The traffic ntop shows under "other" is this really all > other traffic? We have a second VPN running on Microsoft RRAS, this traffic appears > on "other"... Or the other way round: is the sum of what I see on ntop's traffic > pages really the sum of all traffic on the wire? I'm aware of the hub/switch > problem, we have ntop running on a hub... Is there anything which isn't counted at > all?
If you're interrested in the traffic counted as "other", maybe a patch I posted on the ntop-dev mailing-list a few days ago will be useful to you. It adds a -j option to ntop which, when set, attempts to dump to a pcap file all the packets that ntop counts as "other". Then you can feed this file into a sniffer like ethereal to analyse its contents. If you find out that some traffic is missing, it can be either that my patch is buggy (in that case, please let me know) or that ntop doesn't see all traffic. You could also have ntop dump all the packets it sees (there's an option for that too), use a sniffer to capture traffic in another file, and compare the two... Lo�c _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
