Hello,
I'm new to ntop and I'm trying to set up a machine to know how my WAN
link is used.
The machine runs with Mandriva Linux 2008 Spring. Ntop rpm is already
built for this release so the installation went OK.
I have several ethernet cards on my host : one for web and admin access
and other ones for capture (span on switch port on which there are
connected). I only capture on one interface at the same time.
My problems are the following :
- ntop receive nearly every packets (about 1% are dropped by libpcap)
BUT only 0.1% of them are processed :
Dropped (libpcap) 1.4% 787,483
Dropped (ntop) 0.0% 0
Total Received (ntop) 54,669,688
Total Packets Processed 571,575
- all the unprocessed packets are treated like undersize packets :
Size <= 64 bytes 9572.8% 55,643,484
64 < Size <= 128 bytes 36.1% 209,638
128 < Size <= 256 bytes 14.1% 82,026
256 < Size <= 512 bytes 7.8% 45,125
512 < Size <= 1024 bytes 3.8% 22,048
1024 < Size <= 1518 bytes 38.3% 222,432
Size > 1518 bytes 0.0% 0
- but I can assure that all the frames sent to the capture interface are
greater than 64o
- regarding CPU and memory, everything is OK on the host (generaly 80% idle)
I checked the FAQ and search the Web but did not find any answer.. Does
anybody have an idea about my case ?
Thanks a lot and best regards.
Cys
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
