[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntop
Subject:    [Ntop] Report Data
From:       Rob Heilman <digger () digger ! cc>
Date:       2008-01-30 19:48:59
Message-ID: 47A0D4AB.60502 () digger ! cc
[Download RAW message or body]

I am seeing some issues with the reported data:

Dropped (libpcap)       0.5%    45,716
Dropped (ntop)  0.0%    0
Total Received (ntop)   9,003,050
Total Packets Processed 6,317,490
Unicast 73.2%   4,625,430
Broadcast       26.8%   1,692,060
Multicast       0.0%    0

Shortest        60 bytes
Average Size    699 bytes
Longest 1,518 bytes
Size <= 64 bytes        42.5%   2,685,560
64 < Size <= 128 bytes  39.4%   2,492,172
128 < Size <= 256 bytes 5.5%    346,849
256 < Size <= 512 bytes 1.9%    121,950
512 < Size <= 1024 bytes        6.3%    398,488
1024 < Size <= 1518 bytes       46.8%   2,958,031
Size > 1518 bytes       0.0%    0

Packets too long [> 1518]       32.6%   2,059,725
Bad Packets (Checksum)  0.0%    0


1.  Any suggestions why Total Processed is always lagging behind Total 
Received?  The gap grows wider all the time.
2.  Why does the size matrix add up over 100%?
3.  Why the discrepancy between "Size > 1518 bytes" and "Packets too 
long [> 1518] "

4.  Most importantly the archive link on 
http://listgateway.unipi.it/mailman/listinfo/ntop-dev does not work.  
Does anyone know why or have a good mirror location?

Thanks,

Rob Heilman
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
[prev in list] [next in list] [prev in thread] [next in thread]