arnevt at gmail
Aug 8, 2012, 6:32 AM
Post #1 of 1
ntop 5.0 and statistics in IP -> summary -> traffic
We use ntop 4.1 with netflow and sflow collectors.
If redirect our flows to another collector (by adding an extra export line
in the cisco/junos config), running ntop 5.0 we get weird results in
different statistics pages.
For example if we go to IP -> summary -> traffic, we see a table with per
host a few numbers/counters. In the case of Netflow, the sum of all the
protocols is exactly the double of the number mentioned in "data". We don't
have this issue in ntop 4.1
If we look at the same page with the sflow collector, the results are even
worse, we get differences in factor 10 or so, also, in ntop 4.1 no problem
with the counters (but we do have other problems there with sflow, but
that's not the topic here)