Re: [Ntop] Ntop and ERSPAN

I have upgraded to v.3.3.180301 and I still see GRE traffic. Greetings. 2018-03-01 21:36 GMT+01:00 Rokkhan : > Hi, > > I am using v.3.3.180125 version. I send you attached an small pcap. > > > > > Greetings > > 2018-03-01 20:54 GMT+01:00 Simone Mainardi : >

Re: [Ntop] Ntop and ERSPAN

Hi, I am using ntopng and it shows traffic flows as gre, instead of the real traffic. Do i have to enable any option? Greetings El 1 mar. 2018 20:35, "Simone Mainardi" escribió: > ntopng decapsulates GRE tunnels by default. nprobe needs the following > option to account for

Re: [Ntop] Ntop and ERSPAN

ntopng decapsulates GRE tunnels by default. nprobe needs the following option to account for decapsulated traffic: [--tunnel|-5] | Compute flows on tunnelled traffic rather than | on the external envelope Simone > On 28 Feb 2018, at

Re: [Ntop] Ntop and ERSPAN

As you can see from https://github.com/ntop/ntopng/blob/dev/src/NetworkInterface.cpp#L1521 ntopng decapsulates GRE traffic. Are you using the latest version? Can you enclose a pcap file so we can try and reproduce? > On