To "analyze" the data you need to save the packets/streams/flows/whatever and use wireshark/tcpdump/whatever.
If the apps are all using common ports it's easy to classify. The problem is when everything is tunneled in http - then what? Layer 4 classification is "OK" - but deeper classification would be great. G ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dale Qualls Sent: Monday, September 15, 2008 8:49 AM To: [email protected] Subject: [Ntop] Newbie question regarding audio/video streaming Is there a way to see audio and/or video streaming? I'm using 3.3.7 on FC listening via a hub at the router level. I see tons of UDP data which is probably streaming content but I can't find a way to actually analyze that data. Thanks in advance and thanks to Luca for all of the hard work on an excellent product! ************************************************************************ *** The preceding message and any attachments may contain confidential information protected by the attorney-client or other privilege. You may not forward this message or any attachments without the permission of the sender. If you believe that it has been sent to you in error, please reply to the sender that you received the message in error and then delete it. Nothing in this email message, including the typed name of the sender and/or this signature block, is intended to constitute an electronic signature unless a specific statement to the contrary is included in the message. ************************************************************************ *** <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
