Hi, Sorry about creating a new thread I did not realise digest was on.
Firstly Luca's Question, "as you using the latest development packages of ntopng and nprobe? Luca" To Answer Luca's question I am running the Stable repos, should I be using Nightly? ntopng x86_64 v.2.4.170202 nProbe v.7.4.170202 ($Revision: 5334 $) Then Simone Mainardi's response "If all the hosts seen fall in local networks, then you will see identical counters local2remote and remote2local. Indeed, the same amount of traffic is counted as egress (i.e., from a local network) and as ingress (i.e., to a local network). Can you please verify if flow src and dst are always in local networks." Hi Simone, All our subnets which we define as local display as local under "Top Local Talkers" on the Dashboard. All the remote connections to our locally defined subnets are shown under "Top Remote Destinations" which seems correct. To give you more info on the setup the servers on our locally defined public subnets are public facing web, mailservers etc. With regards to the flows it does correctly display the client / server fields as remote or local depending on the direction of the connection. Thanks Jean-Pierre Human
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
