Yes. currently I have ntop running with -l log. There is a file at /var/lib/ntop/ called log.eth0.pcap which is the correct size(The total amount of traffic seen by ntop on eth0) and which contains(as shown by grep) the data that should be there but which appears corrupt to wireshark(when a regular pcap file produced by tcpdump works) and this happens with both 3.3.9 and 3.2-r3.
On Tue, Apr 7, 2009 at 6:01 PM, Gary Gatten <[email protected]> wrote: > Are you talking about the “*-l | --pcap-log” *option? > > > > G > > > > > ------------------------------ > > *From:* [email protected] [mailto:[email protected]] *On Behalf Of > *Raja Baz > *Sent:* Tuesday, April 07, 2009 2:47 AM > *To:* [email protected]; [email protected] > *Subject:* Re: [Ntop] Ntop log file > > > > The log file is produced, its name is correct and I can find it. Its size > is also correct(the same size as the total traffic seen by ntop). I also > grepped it for contents of pages which I had visited and it shows up. So the > data is definitely there, it looks corrupt to wireshark though for some > reason(while a capture file produced by tcpdump works just fine). > I'll check out the SVN version to see if it's a bug and it has been fixed > and report back the results. I was encountering a bug with --sticky-hosts on > 3.3.9 so I'm currently using 3.2-r3(though the log problem, as I said > earlier, exists in both); hopefully, both will have been fixed in SVN. > "This email is intended to be reviewed by only the intended recipient > and may contain information that is privileged and/or confidential. If you > are not the intended recipient, you are hereby notified that any review, > use, dissemination, disclosure or copying of this email and its attachments, > if any, is strictly prohibited. If you have received this email in error, > please immediately notify the sender by return email and delete this email > from your system." > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > >
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
