Remember those are BYTES - so a lot of small UDP packets vs. a smaller number of large TCP packets (game downloads, perhaps?)
Roll down lower and you'll see the per-protocol breakdowns - some of those are packet counts. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kenneth Porter Sent: Thursday, January 13, 2005 11:57 AM To: [email protected] Subject: RE: [Ntop] Stacked bar charts --On Thursday, January 13, 2005 6:26 AM -0700 Chris Moore <[EMAIL PROTECTED]> wrote: > Well, I guess this is kind of a "non-authoritative" answer, but this > type of graph is usually stacked - the bars are on top of each other. > So on your graph you usually have mostly TCP, some UDP and a tiny bit > of ICMP traffic. Pretty typical. The total height is the total traffic. > That's how I've always read those graphs. Someone please correct me if > I'm wrong. Hmm, that should be backwards, then. Most of our traffic should be UDP, because it's primarily a game server with a little bit of web and email. _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
