I found the issue. ntop consumed all the memory (4GB) and then started dropping packets, hence the missing packets. Guess there is too much traffic for ntop. Bum deal because I really liked all the ntop information.
--- Burton Strauss <[EMAIL PROTECTED]> wrote: > Check the stats in the netflow plugin - there's a > series of counters that > show flows received and what happened to them. > -----Burton > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of seth > seth > Sent: Monday, March 14, 2005 4:19 PM > To: [email protected] > Subject: [Ntop] ntop and netflow > > I am running ntop 3.1 on a RH9 box. > > My netflow probe/generator has 2 NIC's. One that is > grabbing the traffic > the other is sending out Netflow data. The Netflow > NIC is connected to the > NTOP box over a 100Mb crossover cable. So > theoretically Netflow traffic is > the only data on that network. > > My problem is that the interface statistics for the > virtual Netflow > interface show that it's recieved X-packets (which > is what ethereal also > shows as received). My problem is that my traffic > statistics just dont > match up (they're too low). When I look at the > Netflow statistics (on the > Netflow plugin page) they show that the plugin has > received X/10 packets. > So my problem is that NTOP is getting all the > packets but doesn't appear to > be sending them all over to the Netflow plugin. > > Are there any know issues with passing packets to > the plugins? Is there > some configuration that I could be missing? I am > trying to use v9, but have > similar results with v5. > > Both boxes are dual processing systems with 2+ GB of > RAM. > > Any thoughts would be great. > -seth > > > > __________________________________ > Do you Yahoo!? > Make Yahoo! your home page > http://www.yahoo.com/r/hs > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
