Check void initLibpcap(char* rulesFile, int numDevices) {} in initialize.c for the call to pcap_lookupnet()...
There is also something that goes on in initDevices(), but I'm not really sure why it does that. I *thought* pcap_lookupnet() would retrieve it all... I'm guessing they just took advantage of having to open the socket to get the packets to process and stored away the ip when they had it, vs. later fom pcal_lookupnet()... -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Gar Nelson Sent: Thursday, January 17, 2002 1:57 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop] bugs vs. cockpit error Yes, but where is NTop going, by default, to look up that address? It doesn't appear to be /etc/sysconfig/network-scripts/ifcfg-eth0. [EMAIL PROTECTED] wrote: > By default NTop says anything in the same subnet (based > on your ip and netmask) is local, rest remote. But > there is a parameter to override it. > > Check the Ntop command line - perhaps the RPM updated > the file (/etc/rc.d/init.d/ntop or some such) with the > old local address for the parameter (I *think* it's -L?) > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop