Burton M. Strauss III wrote:
Try this patch - I'm working on it to rationalize the drop counts.
Thanks.
It won't fix the drops (that's either NIC, libpcap or ntop simply not accepting them fast enough from libpcap), but it should make the stats more rational in both the PR_ and info.html/textinfo.html.
Just compiled and launched it.
Web page is not the same (as supposed) and, while hitting "traffic" again and again, the stats seams to be ok :
Received (libpcap) 653,801
Less: Dropped (libpcap) 37,068
Gives: Given to ntop 616,733
Total Received by ntop 616,408
Gives: Total packets 616,408
Unicast 100.0% 616,107
Broadcast 0.0% 190
Multicast 0.0% 111
CPU usage is about 33%. 21.7% user, 0.0% nice, 11.2% system, 1.6% interrupt, 65.5% idle
Network traffic is arround 7500Mbps/1600Mbps.
Second answer about the test I started a few hours ago.
Here are the results in /var/log/messages after stopping ntop (with kill -2 PID) :
STATS: 47,711,705 packets received by filter on fxp1
STATS: 295,578 packets dropped by kernel
STATS: 0 packets dropped by ntop
That's 0.62% of packet dropped by kernel as read in the log (not website).
David.
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
