Mailing List Archive

Q. How does NTOP handle seeing the same traffic flow more than once?
Q. How does NTOP handle seeing the same traffic flow more than once?


With our network topology, we have traffic that may only been seen on segment B, but we also have traffic that could possibly been on segment A and A+B.


I'm trying to decide if we need two deployments (one for A and one for B), or if its possible to have a single deployment (single pane of glass) and ntop is intelligent enough to recognize that it already saw a flow on A and that seeing it also on B won't result in the doubling of statistics.


Any feedback would be great. Thank you!
Re: Q. How does NTOP handle seeing the same traffic flow more than once? [ In reply to ]
Chris
no deduplication is not supported, but I need to understand more in orde to tell you if what you need can be implemented. Please file an issue on github, so we can track it. please add an example, pcap, anything that can help to understand the problem

Regards Luca

> On 23 Dec 2016, at 16:46, Chris Sevey <csevey@hotmail.com> wrote:
>
> Q. How does NTOP handle seeing the same traffic flow more than once?
>
> With our network topology, we have traffic that may only been seen on segment B, but we also have traffic that could possibly been on segment A and A+B.
>
> I'm trying to decide if we need two deployments (one for A and one for B), or if its possible to have a single deployment (single pane of glass) and ntop is intelligent enough to recognize that it already saw a flow on A and that seeing it also on B won't result in the doubling of statistics.
>
> Any feedback would be great. Thank you!
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it <mailto:Ntop@listgateway.unipi.it>
> http://listgateway.unipi.it/mailman/listinfo/ntop <http://listgateway.unipi.it/mailman/listinfo/ntop>
Re: Q. How does NTOP handle seeing the same traffic flow more than once? [ In reply to ]
Chris
no deduplication is not supported, but I need to understand more in orde to tell you if what you need can be implemented. Please file an issue on github, so we can track it. please add an example, pcap, anything that can help to understand the problem

Regards Luca

> On 23 Dec 2016, at 16:46, Chris Sevey <csevey@hotmail.com> wrote:
>
> Q. How does NTOP handle seeing the same traffic flow more than once?
>
> With our network topology, we have traffic that may only been seen on segment B, but we also have traffic that could possibly been on segment A and A+B.
>
> I'm trying to decide if we need two deployments (one for A and one for B), or if its possible to have a single deployment (single pane of glass) and ntop is intelligent enough to recognize that it already saw a flow on A and that seeing it also on B won't result in the doubling of statistics.
>
> Any feedback would be great. Thank you!
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it <mailto:Ntop@listgateway.unipi.it>
> http://listgateway.unipi.it/mailman/listinfo/ntop <http://listgateway.unipi.it/mailman/listinfo/ntop>