Well, I guess this is kind of a "non-authoritative" answer, but this type of graph is usually stacked - the bars are on top of each other. So on your graph you usually have mostly TCP, some UDP and a tiny bit of ICMP traffic. Pretty typical. The total height is the total traffic. That's how I've always read those graphs. Someone please correct me if I'm wrong.
Hmm, that should be backwards, then. Most of our traffic should be UDP, because it's primarily a game server with a little bit of web and email.
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
