Sounds like you have numerous issues. What version of nTop and where did you get it from? The nTop developers usually prefer you download from SVN and compile on your machine, but plenty of others are using prebuilt binaries without issues. Just FYI:
Re Network Flows, this is from the man page - define them using this startup arg: -F | --flow-spec It is used to specify network flows similar to more powerful applications such as NeTraMet. A flow is a stream of captured packets that match a specified rule. The format is <flow-label>='<matching expression>'[,<flow-label>='<matching expression>'] , where the label is used to symbolically identify the flow specified by the expression. The expression is a bpf (Berkeley Packet Filter) expression. If an expression is specified, then the information concerning flows can be accessed following the HTML link named 'List NetFlows'. For instance define two flows with the following expression LucaHosts='host jake.unipi.it or host pisanino.unipi.it',GatewayRoutedPkts='gateway gateway.unipi.it' . All the traffic sent/received by hosts jake.unipi.it or pisanino.unipi.it is collected by ntop and added to the LucaHosts flow, whereas all the packet routed by the gateway gateway.unipi.it are added to the GatewayRoutedPkts flow. If the flows list is very long you may store in a file (for instance flows.list) and specify the file name instead of the actual flows list (in the above example, this would be 'ntop -F flows.list'). Note that the double quotations around the entire flow expression are required. -----Original Message----- From: Gary Gatten Sent: Thursday, October 23, 2008 6:34 PM To: 'ntop@unipi.it' Subject: RE: [Ntop] netflow configuration questions PS: The /8 works in the command line options and the notes on the netflow config page say it will accept either format. -----Original Message----- From: Gary Gatten Sent: Thursday, October 23, 2008 5:49 PM To: 'ntop@unipi.it' Subject: RE: [Ntop] netflow configuration questions 1.) Yes - I believe it supports supernetting, but may have to use the hex notation: 255.0.0.0 instead of /8. 2.) Yes - I have this config. I configured each netflow interface to listen on a different port; 2055, 2056, 2057, etc. In one nTop instance I have 8 netflow interfaces representing different regions of the country - our sales regions. HTH G -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John A. Kilpatrick Sent: Thursday, October 23, 2008 5:33 PM To: ntop@unipi.it Subject: [Ntop] netflow configuration questions I read what docs I could find, but couldn't get answers. 1. For "Virtual NetFlow INterface Network Address" it says: "If the NetFlow probe is monitoring only a single network, then this is all you need to set. If the NetFlow probe is monitoring multiple networks, then pick one of them for this setting and use the -m | --local-subnets parameter to specify the others." Can I use supernets here? I mean if all my local nets are in 10.1/8 can I just put 10.1/8 there? 2. Can I somehow have multiple NetFlow interfaces with different addresses? I configured 2 of them - one for "corporate" and one for "production". I configured them with different "Virtual NetFlow Interface Network Address"es. Once I configured the second one the first one stopped working. -- John A. Kilpatrick [EMAIL PROTECTED] Email| http://www.hypergeek.net/ [EMAIL PROTECTED] Text pages| ICQ: 19147504 remember: no obstacles/only challenges _______________________________________________ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font> _______________________________________________ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop