Re: Ntop and ERSPAN

Hi,

I am using v.3.3.180125 version. I send you attached an small pcap.




Greetings

2018-03-01 20:54 GMT+01:00 Simone Mainardi <[email protected]>:

> As you can see from https://github.com/ntop/ntopng/blob/dev/src/
> NetworkInterface.cpp#L1521 ntopng decapsulates GRE traffic. Are you using
> the latest version? Can you enclose a pcap file so we can try and reproduce?
>
>
> On 1 Mar 2018, at 20:40, Rokkhan <[email protected]> wrote:
>
> Hi,
> I am using ntopng and it shows traffic flows as gre, instead of the real
> traffic.
> Do i have to enable any option?
> Greetings
>
>
> El 1 mar. 2018 20:35, "Simone Mainardi" <[email protected]> escribió:
>
>> ntopng decapsulates GRE tunnels by default. nprobe needs the following
>> option to account for decapsulated traffic:
>>
>> [--tunnel|-5]                       | Compute flows on tunnelled traffic
>> rather than
>>                                     | on the external envelope
>>
>>
>> Simone
>>
>> > On 28 Feb 2018, at 18:28, Rokkhan <[email protected]> wrote:
>> >
>> > Hi,
>> >
>> > I am sending traffic to one of the ntop interfaces with ERSPAN but
>> traffic info shows application as "GRE".
>> >
>> > ¿Coudl it be configured to inspect the traffic inside the ERSPAN and
>> show the real application?
>> >
>> > Saludos.
>> > _______________________________________________
>> > Ntop mailing list
>> > [email protected]
>> > http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop