It most certainly affects the calculation of the traffic. The reason
I proposed this change in the first place was due to the fact that
ntop uses the sampling rate to determine how many packets should be
processed. In order to force ntop to process every packet instead of
1 of 8192, I made the modification to sflowPlugin.c. Unfortunately,
ntop also uses the sampling rate to calculate the amount of traffic,
so it will totally mess with those results. For me, having it
process all packets was a worthwhile compromise.
Now if only I can find that line of code that directly correlates to
packets processed I'd do something like:
packetsToProcess = packetsReceived
instead of
packetsToProcess = packetsReceived / samplingRate (or something)
If someone else knows where this is, let me know!
Daniel
On Aug 25, 2006, at 10:23 AM, Fabrice ANDREI wrote:
Thanks for your prompt answer.
It seems the collector see all the network traffic. If it can help,
I was a problem : my sflow
sampling rate was 8192 and ntop were showing me nothing. On an
advice of this mailing list, I modified
plugins/sflowPlugin.c: myGlobals.device[deviceId].samplingRate =
sample->meanSkipCount;
and put
plugins/sflowPlugin.c: myGlobals.device[deviceId].samplingRate = 0;
Since this modification, ntop seems to work and the sampling rate
is now 1. But I did NOT understand
what this change can modify... Maybe this disturbe the calcul of
the traffic ?
Cheers,
Fabrice
Nick Weaver a écrit :
What is sending SFlow packets, and are you sure it can see your
traffic?
Problems like this are almost always caused by placement of the
sniffer/collector.
Nick Weaver
Manager, Lab Infrastructure
[EMAIL PROTECTED]
P: 801-852-9500
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of
Fabrice ANDREI
Sent: Friday, August 25, 2006 5:10 AM
To: [EMAIL PROTECTED]
Subject: [Ntop] About values related by ntop
Hi,
I have still a problem with ntop. I configured it as sflow collector,
and it seems to work fine. But
I don't understand values it provide :
in the page "All Protocole > Troughtput", I can see my computer with
"2.0 Kbps" in the columns
Data/current. Normally, I would have 2.0 Gb (This is what firefox
said
when I am downloading a very
big iso file) ! I have the same problem in all pages : values aren't
what they sould be...
Any idea ?
Cheers,
Fabrice
--
/ . ________________________________________________
/ | /|
| |
/ |' ' | European Synchrotron Radiation Facility
(ESRF) |
/ / | Fabrice
ANDREI |
___ . / | CI GROUP - Room
52 |
\ # \/ \ | Mailbox :
24 |
| ' /`. \ | Phone : (04-38-88-)
19-67 |
|# | | \ | |
[EMAIL PROTECTED] |
\ | | \ | |_
_____________________________________________|
/#\| `. (|L / /
\/ \ `.__//) /
/ #| \ (/
\# /\#\_ __(
\_|| `.#~---,--' \
\ `---' |(\ )
/ L_T~
--.__,- /
`-`._.-~
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
