tobias.dinse at stegbauer
Nov 21, 2011, 4:32 AM
Post #1 of 1
(240 views)
Permalink
|
Hi,
I have some problems with getting the right informations about my
network traffic with ntop on Debian Squeeze.
Can ntop see the different between sport and dport?
What can be non-ip? We got 32GB non-ip traffic in 2 weeks which is about
34% of our complete traffic. I think i cant be Spanning tree oder
somthing like that.
We have an IPsec Connection with racoon. Maybe ntop count the traffic
twice? (encrypted / clear text)
In the Protocol List is an entry that called "Messanger". We have over
40 gb traffic for this without running any Services on this Ports:
Messenger=1863|5000|5001|5190-5193|
thanks and regards
Tobias
|
