Can be - on a busy network there are a huge # of hosts to create initially (as each new one is seen) and this causes DNS loads, etc.
There's a discussion in docs/FAQ based on some research I did about a year ago. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Williams Sent: Thursday, December 09, 2004 6:45 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop] dropped - over 100%? I've seen this when i first started up NTOP... the first few minutes seemed to drop a lot of packets.. as everything loaded the % of dropped packets decreased. I thought this was atributed to the system being overloaded during initalization. However, my system didnt' continue to increase % of dropped packets... --- Gadi Evron <[EMAIL PROTECTED]> wrote: > Burton Strauss wrote: > > Move up to libpcap 0.8.x - it won't fix things, > but it does report them more > > rationally. > > -----Burton > > Actually, I down-graded from that. It cause NTOP to be even less > stable on a fast network. > > Either that or I am reading what I saw wrong. > > The 100+ per cent issue is a new one. I have been running NTOP for a > while. I am interested in what caused it to suddenly happen. > > Gadi. > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
