Thank you, On Tue, Jan 6, 2009 at 11:38 AM, Graeme Fowler <[email protected]> wrote: > Hi > > On Tue, 2009-01-06 at 11:21 -0500, Mike Marseglia wrote: >> I have a question on the amount of traffic ntop and libpcap can >> handle, considering hardware specifications. I have spanned 1Gb of >> traffic the following linux system and ntop is reporting a large >> amount of dropped traffic. ntop eventually quits because it runs out >> of hash table memory. I suspect libpcap is dropping FIN packets and >> as a result ntop keeps the conversation in memory. > > Your probably want to consider using PF_RING over libpcap for this > capture rate: > > http://www.ntop.org/PF_RING.html > > You'll need to recompile ntop to do so. > > Graeme > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop >
-- Mike Marseglia Systems Administrator, OSHEAN 401-886-0887 x208 401-248-4867 [email protected] _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
