Sébastien CRAMATTE
Mon, 07 Jul 2008 03:40:42 -0700
Chris Wilson escribió: > Hi Sebastien, > > Sébastien CRAMATTE wrote: > > >> I'm running pmacctd on a natted network. >> pmacctd account properply local traffic. My problem is that when I visit >> a website o any other thing that is after the nat router (I'm >> connected with cable modem) traffic is never accounted ! >> >> Does this is the normal behavior ? What happens is that I've tested >> with ntop too ... and ntop give me back these datas this is why I ask ... >> Normally interfaces in promiscious mode should see every kind of traffic ? >> > > Do you mean that you don't see traffic from other machines on your > network out to the Internet? That probably means that your machine > doesn't see the traffic. If it's in promiscuous mode, that probably > means that you have a switch rather than a hub. Try configuring your > switch with a mirror port, or putting your sensor inline with your NAT > router as a transparent bridge. Also check that you can see the traffic > with tcpdump or wireshark before blaming pmacct :) > > Cheers, Chris. > Hi Yes I've got a switch. I will try to setup it as a bridge. I believe that I can't setup my router switch (I'm using dd-wrt on a buffalo) pmacct is a great tool ;) ... I don't blame it ;) I'm a newbie in ... Cheers _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists