Here's my protocol.list file: HTTP=http|www|https|3128 Mail=pop-2|pop-3|pop3|kpop|smtp|imap|imap2 DNS=name|domain FTP=ftp|ftp-data NBios=135|netbios-ns|netbios-dgm|netbios-ssn|445 OpenVPN=1194 PPTP=1723HTTP=http|www|https|3128 Mail=pop-2|pop-3|pop3|kpop|smtp|imap|imap2 DNS=name|domain FTP=ftp|ftp-data NBios=135|netbios-ns|netbios-dgm|netbios-ssn|445 OpenVPN=1194 PPTP=1723 BitTor=6881-6889|6969 Gnutel=6346-6348 IRC=194|4110|5555|6660-6669|6679|7000|8000|9000 Kazaa=1214 WinMX=6699|7730 eDonkey=4661-4665 Mesngr=1863|4099-5001|5050|5190-5193|6891-6901 SNMP=snmp|snmp-trap SSH=22|222|2222 NTP=123 VNC=5800|5900-5909 NTOP=3000|3001 DHCP=67-68 LOW=0-1023 MID=1024-49151 HI=49152-65535
But on the Summary/Traffic/GlobalTCP-UDP Distribution page, I see reasonable numbers for everything except, at the bottom, where it says "Other TCP/UDP-based Protocols", I see a really big number: 2.2GB over about 22 hours. So, what the heck is this? Encrypted so much that NTOP can't even discern what port it's on?
mh _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
