Asymetrical traffic flow. Its very unlikely a host will send and receive the exact same amount of data. Are you using netflow?
________________________________ From: [email protected] To: [email protected] Sent: Sat Apr 04 09:07:33 2009 Subject: [Ntop] Total remote -> local traffic less than local -> remotetraffic I have ntop running with --sticky-hosts and it's been up for a couple of hours. When I look at the IP data from a local -> remote point of view I get a total data traffic of 40MB. When I look at remote -> local, the total is 8MB. This is weird since these should be just two different points of view for the same data shouldn't they? And with sticky hosts not data should have been purged, right? Or am I missing something? <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
