Hi Luca,
Yes. That is correct, I am switching to Net-Flow interface and was
seeing the flag in IP TRAFFIC-->HOSTS.
However I didn't click on the host (before asking the question...i
apologize) and instead just looked in mail archives for the answer.
Today I clicked on the host to get details and NTOP says that there can
be another reason "In-Correct Subnet Masks". 
So I checked on the host and indeed the "Host Subnet Mask" was different
from the "Local Network Subnet Mask".
So it was my mistake and NTOP helped me fix it..!!

Thanks \\ Naman


-----Original Message-----
From: Luca Deri [mailto:[EMAIL PROTECTED] 

Naman,
if you understand correctly, you use ntop as NetFlow collector, then you
switch to the Netflow interface into ntop and ntop shows you a red flag
there: is this correct? If so, please capture some netflow flows using
tcpdump (-w file.name -s 1514) and mail me file.name so that I can
reproduce the problem here.


_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to