search

ntop / nProbe

Open source components and extensions for nProbe
http://ntop.org
GNU General Public License v2.0
1.65k stars 44 forks source link

Cento nDPI -> NTOPNG problems #479

Open srfn8kd opened 3 years ago

srfn8kd commented 3 years ago

When cento is executed as

-A -i fbcard:0:a00 --zc -D 2 --aggregated-egress-queue --skip-fragments

then nDPI does not properly identify an SSH session established on a nonstandard port

when cento is executed without --aggregated-egress-queue

-A -i fbcard:0:a00 --zc -D 2 ---skip-fragments

then ntopng nDPI correctly identifies the SSH session, however then there are warning lines such as below printed by ntopng on a continuing basis

Apr 20 16:06:02 thraulus.caltech.eduhttp://thraulus.caltech.edu ntopng[47962]: [ZMQParserInterface.cpp:1238] WARNING: JSON type 1 not supported Apr 20 16:06:02 thraulus.caltech.eduhttp://thraulus.caltech.edu ntopng[47962]: 20/Apr/2021 16:06:02 [ZMQParserInterface.cpp:1238] WARNING: JSON type 1 not supported Apr 20 16:06:02 thraulus.caltech.eduhttp://thraulus.caltech.edu ntopng[47962]: 20/Apr/2021 16:06:02 [ZMQParserInterface.cpp:1238] WARNING: JSON type 5 not sup ported Apr 20 16:06:02 thraulus.caltech.eduhttp://thraulus.caltech.edu ntopng[47962]: [ZMQParserInterface.cpp:1238] WARNING: JSON type 5 not supported

I am using Influxdb 1.8.4 for timeseries and updated to the latest NTOP releases yesterday.

CentOS 8 kernel 4.18.0-240.10.1.el8_3.x86_64

srfn8kd commented 3 years ago

Updated to latest stable releases today, still happening.