Mailing List Archive: NTOP Stats reporting wrong...

Interesting.

I would be curious to know the results of a ping of the broadcast
address , ie.. do you get duplicates, Also is your traffic all unicast
or multicast, TCP or UDP, and what kind of broadcasting is going on?

Maybe you could put up a few fake diagrams or something
indicating your network layout in more detail than you have here.

If your other boxes running ntop work correctly and provide
accurate stats then one must assume that either A ..you have a bad box..
or B .. traffic is truly different in that particular area.

Try moving one of the boxes you know works accuratly into the
same network position as your problem box.. and see what happens.., if
you've already done this.. take a look at your NIC's and compare them
using ifconfig

And please let us know.. i might just have the same type of
problem.

Thanks

Madhav Diwan

-----Original Message-----
From: Eric_Josephson@groove.net
Sent: Thu 6/21/2001 10:29 PM
To: ntop@unipi.it
Cc: jej@groove.net
Subject: [Ntop] NTOP Stats reporting wrong...

Hello All,
I've been running NTOP for about a year now. I've mostly
had great
luck with it. I currently have NTOP compiled and running on a
number of
systems and all but one work properly. The one that does not
work reports
4 times the traffic than is actually going across it's path. To
confirm
this I have used two other NTOP boxes and the stats from the
firewall I'm
monitoring.

I have tried recompiling a number of time with newer CVS drops
and the
released stable beta2. I've even gone as far as to compare
TCPDump capture
files. The TCPDump files are the same, but NTOP reports 4 time
the actual.
Any ideas? Thanks all.

--

J. Eric Josephson
978-720-2159
mailto:eric_josephson@groove.net

_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listmanager.unipi.it/mailman/listinfo/ntop

Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Wagner Weber & Williams