RE: [Ntop] New to Ntop. Need initial issues resolved.
Read docs/FAQ - there are articles on switched networks. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Hoss Sent: Thursday, August 11, 2005 11:19 AM To: Ntop Subject: [Ntop] New to Ntop. Need initial issues resolved. Hi, I have searched the archive and really haven't found a good answer to my simple question. I apologize if this question is a problem, but I have looked at all the available documents and haven't read an answer. Anyway, my question is this. I see that Ntop can run as a host, border gateway, or sniffer. I just want to analyze traffic on our switched 192 network and wanted to know what commands I have to enter at runtime to make ntop see all the traffice on the network, or do I have to put it on a box that is a gateway? Thanks in advance. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] New to Ntop. Need initial issues resolved.
You don't have to do anythint with Ntop specifically for switched networks. Unless I misunderstood your question, the issue is one of general networking. Ntop can't report on traffic that it doesn't see -- and it wouldn't see all by default in a switched environment. Investigate network taps or even span ports. Andrew -Original Message- From: Jason Hoss [mailto:[EMAIL PROTECTED] Sent: Thursday, August 11, 2005 9:19 AM To: Ntop Subject: [Ntop] New to Ntop. Need initial issues resolved. Hi, I have searched the archive and really haven't found a good answer to my simple question. I apologize if this question is a problem, but I have looked at all the available documents and haven't read an answer. Anyway, my question is this. I see that Ntop can run as a host, border gateway, or sniffer. I just want to analyze traffic on our switched 192 network and wanted to know what commands I have to enter at runtime to make ntop see all the traffice on the network, or do I have to put it on a box that is a gateway? Thanks in advance. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop NOTICE OF CONFIDENTIALITY-The information in this email, including attachments, may be confidential and/or privileged and may contain confidential health information. This email is intended to be reviewed only by the individual or organization named as addressee. If you have received this email in error please notify Scottsdale Medical Imaging, an affiliate of Southwest Diagnostic Imaging, LTD immediately - by return message to the sender or to [EMAIL PROTECTED] - and destroy all copies of this message and any attachments. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Scottsdale Medical Imaging. Confidential health information is protected by state and federal law, including, but not limited to, the Health Insurance Portability and Accountability Act of 1996 and related regulations. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] New to Ntop. Need initial issues resolved.
I got the point and I know how switched networks work. This was more of a question about how NTop worked. I realize that if the traffic does not go by the port, it will not know it existed. I was just looking for a bit of help in the command line switching needed for border gateway operation is all. No problem... Burton Strauss wrote: You've missed the point - without configuring your network to send all the traffic to ntop, you won't see it. That's true of EVERY network tool. That's why I pointed you to the articles in docs/FAQ, which discuss how Ethernet works and how switched networks work. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Hoss Sent: Thursday, August 11, 2005 1:03 PM To: ntop@Unipi.IT Subject: Re: [Ntop] New to Ntop. Need initial issues resolved. That is what I thought but I wasn't sure if NTOP was just a passive monitoring tool or if it had some active features I was not aware of. I will keep looking. Thanks for the replies. Willy, Andrew wrote: You don't have to do anythint with Ntop specifically for switched networks. Unless I misunderstood your question, the issue is one of general networking. Ntop can't report on traffic that it doesn't see -- and it wouldn't see all by default in a switched environment. Investigate network taps or even span ports. Andrew -Original Message- From: Jason Hoss [mailto:[EMAIL PROTECTED] Sent: Thursday, August 11, 2005 9:19 AM To: Ntop Subject: [Ntop] New to Ntop. Need initial issues resolved. Hi, I have searched the archive and really haven't found a good answer to my simple question. I apologize if this question is a problem, but I have looked at all the available documents and haven't read an answer. Anyway, my question is this. I see that Ntop can run as a host, border gateway, or sniffer. I just want to analyze traffic on our switched 192 network and wanted to know what commands I have to enter at runtime to make ntop see all the traffice on the network, or do I have to put it on a box that is a gateway? Thanks in advance. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop NOTICE OF CONFIDENTIALITY-The information in this email, including attachments, may be confidential and/or privileged and may contain confidential health information. This email is intended to be reviewed only by the individual or organization named as addressee. If you have received this email in error please notify Scottsdale Medical Imaging, an affiliate of Southwest Diagnostic Imaging, LTD immediately - by return message to the sender or to [EMAIL PROTECTED] - and destroy all copies of this message and any attachments. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Scottsdale Medical Imaging. Confidential health information is protected by state and federal law, including, but not limited to, the Health Insurance Portability and Accountability Act of 1996 and related regulations. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] New to Ntop. Need initial issues resolved.
From docs/FAQ: Q. How do I use ntop in a switched network? A. First off, you need to be or have the support of your network administrator. (Yes, you can do something called ARP poisoning to - maybe - get the switch to send you all the traffic, but that's beyond this FAQ... STFW) Many switches (although not the USD$50 cheap workgroup units) have a special port or mode, where by all the traffic for the entire network gets copied out that port, in addition to the normal switch action. When you invoke the monitoring mode (called span, mirror, monitor, analysis, etc.), you are forcing the entire switch bandwidth out one port. This may exceed the bandwidth of the port. 100Mbps+100Mbps 100Mbps! Traffic that is being sent to the monitoring port in excess of the capacity of that port is usually dropped. It should NOT slow down the switch on other ports. Some switches have some buffering capability and it *may* be able to keep up with an occasional burst of traffic, as long as the average is below the port capacity and the buffer isn't exceeded. See, for example, http://www.cisco.com/warp/public/473/41.html#archXL. One list of switch manufacturers is the document is titled REFERENCE: Configuring a Switch to Monitor All Traffic from Elron Software. (The URL is long, do a Google search for site:elronsoftware.com wi6038). Etc. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Hoss Sent: Thursday, August 11, 2005 2:37 PM To: ntop@Unipi.IT Subject: Re: [Ntop] New to Ntop. Need initial issues resolved. I got the point and I know how switched networks work. This was more of a question about how NTop worked. I realize that if the traffic does not go by the port, it will not know it existed. I was just looking for a bit of help in the command line switching needed for border gateway operation is all. No problem... Burton Strauss wrote: You've missed the point - without configuring your network to send all the traffic to ntop, you won't see it. That's true of EVERY network tool. That's why I pointed you to the articles in docs/FAQ, which discuss how Ethernet works and how switched networks work. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Hoss Sent: Thursday, August 11, 2005 1:03 PM To: ntop@Unipi.IT Subject: Re: [Ntop] New to Ntop. Need initial issues resolved. That is what I thought but I wasn't sure if NTOP was just a passive monitoring tool or if it had some active features I was not aware of. I will keep looking. Thanks for the replies. Willy, Andrew wrote: You don't have to do anythint with Ntop specifically for switched networks. Unless I misunderstood your question, the issue is one of general networking. Ntop can't report on traffic that it doesn't see -- and it wouldn't see all by default in a switched environment. Investigate network taps or even span ports. Andrew -Original Message- From: Jason Hoss [mailto:[EMAIL PROTECTED] Sent: Thursday, August 11, 2005 9:19 AM To: Ntop Subject: [Ntop] New to Ntop. Need initial issues resolved. Hi, I have searched the archive and really haven't found a good answer to my simple question. I apologize if this question is a problem, but I have looked at all the available documents and haven't read an answer. Anyway, my question is this. I see that Ntop can run as a host, border gateway, or sniffer. I just want to analyze traffic on our switched 192 network and wanted to know what commands I have to enter at runtime to make ntop see all the traffice on the network, or do I have to put it on a box that is a gateway? Thanks in advance. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop NOTICE OF CONFIDENTIALITY-The information in this email, including attachments, may be confidential and/or privileged and may contain confidential health information. This email is intended to be reviewed only by the individual or organization named as addressee. If you have received this email in error please notify Scottsdale Medical Imaging, an affiliate of Southwest Diagnostic Imaging, LTD immediately - by return message to the sender or to [EMAIL PROTECTED] - and destroy all copies of this message and any attachments. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Scottsdale Medical Imaging. Confidential health information is protected by state and federal law, including, but not limited to, the Health Insurance Portability and Accountability Act of 1996 and related regulations. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] New to Ntop. Need initial issues resolved.
Thanks for the help. I appreciate it. Burton Strauss wrote: From docs/FAQ: Q. How do I use ntop in a switched network? A. First off, you need to be or have the support of your network administrator. (Yes, you can do something called ARP poisoning to - maybe - get the switch to send you all the traffic, but that's beyond this FAQ... STFW) Many switches (although not the USD$50 cheap workgroup units) have a special port or mode, where by all the traffic for the entire network gets copied out that port, in addition to the normal switch action. When you invoke the monitoring mode (called span, mirror, monitor, analysis, etc.), you are forcing the entire switch bandwidth out one port. This may exceed the bandwidth of the port. 100Mbps+100Mbps 100Mbps! Traffic that is being sent to the monitoring port in excess of the capacity of that port is usually dropped. It should NOT slow down the switch on other ports. Some switches have some buffering capability and it *may* be able to keep up with an occasional burst of traffic, as long as the average is below the port capacity and the buffer isn't exceeded. See, for example, http://www.cisco.com/warp/public/473/41.html#archXL. One list of switch manufacturers is the document is titled REFERENCE: Configuring a Switch to Monitor All Traffic from Elron Software. (The URL is long, do a Google search for site:elronsoftware.com wi6038). Etc. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Hoss Sent: Thursday, August 11, 2005 2:37 PM To: ntop@Unipi.IT Subject: Re: [Ntop] New to Ntop. Need initial issues resolved. I got the point and I know how switched networks work. This was more of a question about how NTop worked. I realize that if the traffic does not go by the port, it will not know it existed. I was just looking for a bit of help in the command line switching needed for border gateway operation is all. No problem... Burton Strauss wrote: You've missed the point - without configuring your network to send all the traffic to ntop, you won't see it. That's true of EVERY network tool. That's why I pointed you to the articles in docs/FAQ, which discuss how Ethernet works and how switched networks work. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Hoss Sent: Thursday, August 11, 2005 1:03 PM To: ntop@Unipi.IT Subject: Re: [Ntop] New to Ntop. Need initial issues resolved. That is what I thought but I wasn't sure if NTOP was just a passive monitoring tool or if it had some active features I was not aware of. I will keep looking. Thanks for the replies. Willy, Andrew wrote: You don't have to do anythint with Ntop specifically for switched networks. Unless I misunderstood your question, the issue is one of general networking. Ntop can't report on traffic that it doesn't see -- and it wouldn't see all by default in a switched environment. Investigate network taps or even span ports. Andrew -Original Message- From: Jason Hoss [mailto:[EMAIL PROTECTED] Sent: Thursday, August 11, 2005 9:19 AM To: Ntop Subject: [Ntop] New to Ntop. Need initial issues resolved. Hi, I have searched the archive and really haven't found a good answer to my simple question. I apologize if this question is a problem, but I have looked at all the available documents and haven't read an answer. Anyway, my question is this. I see that Ntop can run as a host, border gateway, or sniffer. I just want to analyze traffic on our switched 192 network and wanted to know what commands I have to enter at runtime to make ntop see all the traffice on the network, or do I have to put it on a box that is a gateway? Thanks in advance. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop NOTICE OF CONFIDENTIALITY-The information in this email, including attachments, may be confidential and/or privileged and may contain confidential health information. This email is intended to be reviewed only by the individual or organization named as addressee. If you have received this email in error please notify Scottsdale Medical Imaging, an affiliate of Southwest Diagnostic Imaging, LTD immediately - by return message to the sender or to [EMAIL PROTECTED] - and destroy all copies of this message and any attachments. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Scottsdale Medical Imaging. Confidential health information is protected by state and federal law, including, but not limited to, the Health Insurance Portability and Accountability Act of 1996 and related regulations. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it
RE: [Ntop] new to ntop, question about hostnames and dhcp.
Is their anyway to get the --no-mac switch to NOT shut off the Sessions screen. If start NTOP without the --no-mac switch, NTOP will combine all 50 subnets and into one IP address screw-up all reports. I understand why this happens but cant you use the IP address to log device sessions while the --no-mac switch enabled? Clarence On Tue, 2004-10-19 at 11:42, Burton M. Strauss III wrote: Read the sections in docs/FAQ (or off the (?) menu) about switched networks and --no-mac. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of tomasz abramowicz Sent: Tuesday, October 19, 2004 9:41 AM To: [EMAIL PROTECTED] Subject: [Ntop] new to ntop, question about hostnames and dhcp. hi there! i got an ntop mounted and configured on a machine which monitors network traffic (doh.) Its a very busy office, where lots of diffrent geeks collaborated between companies. network connectivity is provided by dhcpd. we've come to notice that the 'network traffic reports' report a hostname (e.g. fisk168.pocsi.org) which is associated with an IP number (eg. 192.168.90.51). however .90.51 is not always fisk168.pocsi.org. is there a way of dealing with this? t. ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] new to ntop, question about hostnames and dhcp.
Nope that's the way it's coded. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Hart Clarence (rti1clh) Sent: Tuesday, November 02, 2004 10:53 AM To: [EMAIL PROTECTED] Subject: RE: [Ntop] new to ntop, question about hostnames and dhcp. Is their anyway to get the --no-mac switch to NOT shut off the Sessions screen. If start NTOP without the --no-mac switch, NTOP will combine all 50 subnets and into one IP address screw-up all reports. I understand why this happens but cant you use the IP address to log device sessions while the --no-mac switch enabled? Clarence On Tue, 2004-10-19 at 11:42, Burton M. Strauss III wrote: Read the sections in docs/FAQ (or off the (?) menu) about switched networks and --no-mac. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of tomasz abramowicz Sent: Tuesday, October 19, 2004 9:41 AM To: [EMAIL PROTECTED] Subject: [Ntop] new to ntop, question about hostnames and dhcp. hi there! i got an ntop mounted and configured on a machine which monitors network traffic (doh.) Its a very busy office, where lots of diffrent geeks collaborated between companies. network connectivity is provided by dhcpd. we've come to notice that the 'network traffic reports' report a hostname (e.g. fisk168.pocsi.org) which is associated with an IP number (eg. 192.168.90.51). however .90.51 is not always fisk168.pocsi.org. is there a way of dealing with this? t. ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] new to ntop, question about hostnames and dhcp.
Kind of a follow on question to this one. My NTOP Linux box is resolving to a different host name (correct IP, wrong name) I suspect that the problem is in DNS someplace, but not sure - DHCP and DNS is a win 2003 box (I know, I know. Don't go there) Tim Holmes IT Manager Medina Christian Academy, Inc. A Higher Standard... Jeremiah 33:3 Jeremiah 29:11 Esther 4:14 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of tomasz abramowicz Sent: Tuesday, October 19, 2004 10:41 AM To: [EMAIL PROTECTED] Subject: [Ntop] new to ntop, question about hostnames and dhcp. hi there! i got an ntop mounted and configured on a machine which monitors network traffic (doh.) Its a very busy office, where lots of diffrent geeks collaborated between companies. network connectivity is provided by dhcpd. we've come to notice that the 'network traffic reports' report a hostname (e.g. fisk168.pocsi.org) which is associated with an IP number (eg. 192.168.90.51). however .90.51 is not always fisk168.pocsi.org. is there a way of dealing with this? t. ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] new to ntop, question about hostnames and dhcp.
Read the sections in docs/FAQ (or off the (?) menu) about switched networks and --no-mac. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of tomasz abramowicz Sent: Tuesday, October 19, 2004 9:41 AM To: [EMAIL PROTECTED] Subject: [Ntop] new to ntop, question about hostnames and dhcp. hi there! i got an ntop mounted and configured on a machine which monitors network traffic (doh.) Its a very busy office, where lots of diffrent geeks collaborated between companies. network connectivity is provided by dhcpd. we've come to notice that the 'network traffic reports' report a hostname (e.g. fisk168.pocsi.org) which is associated with an IP number (eg. 192.168.90.51). however .90.51 is not always fisk168.pocsi.org. is there a way of dealing with this? t. ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] new to NTOP
On Monday 10 May 2004 12:39, Joachim Schiele wrote: -BEGIN PGP SIGNED MESSAGE- On Monday 10 May 2004 07:04, Rio Martin wrote: Dear folks, I am new to this ntop, i really found this tool very suids my need. I ve small problem when i tried to install it to 2 different servers. The 1st server using Slackware-9.1 which is already installed with libpng. it should be also libpng-dev or something like that, install this and try again! nope .. still doesnt work with libpng-1.2.6beta2 FYI: my libpng-1.2.6beta2 installation step: # cp scripts/makefile.linux makefile # make test # make install and then i try to reconfigure ntop: checking for png.h... yes checking for main in -lpng... no *** * * ERROR: libpng header or library routines are missing * (yes means it was found, no means it was not found) * * png.h...yes * png_read_info() in -lpng... * * No way to proceed. * *???Install libpng (and/or libpng-devel), check www.libpng.org *???and Rerun ./configure * *** Regards, Rio Martin. ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] new to NTOP
Back to my FIRST comment - LOOK in config.log and see the actual error message. Then solve that. Asking again and again here won't help - we can't see the vital information, which is locked away on your machine. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Rio Martin Sent: Monday, May 10, 2004 3:38 AM To: [EMAIL PROTECTED] Subject: Re: [Ntop] new to NTOP On Monday 10 May 2004 12:39, Joachim Schiele wrote: -BEGIN PGP SIGNED MESSAGE- On Monday 10 May 2004 07:04, Rio Martin wrote: Dear folks, I am new to this ntop, i really found this tool very suids my need. I ve small problem when i tried to install it to 2 different servers. The 1st server using Slackware-9.1 which is already installed with libpng. it should be also libpng-dev or something like that, install this and try again! nope .. still doesnt work with libpng-1.2.6beta2 FYI: my libpng-1.2.6beta2 installation step: # cp scripts/makefile.linux makefile # make test # make install and then i try to reconfigure ntop: checking for png.h... yes checking for main in -lpng... no *** * * ERROR: libpng header or library routines are missing * (yes means it was found, no means it was not found) * * png.h...yes * png_read_info() in -lpng... * * No way to proceed. * *???Install libpng (and/or libpng-devel), check www.libpng.org *???and Rerun ./configure * *** Regards, Rio Martin. ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] new to NTOP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 10 May 2004 07:04, Rio Martin wrote: Dear folks, I am new to this ntop, i really found this tool very suids my need. I ve small problem when i tried to install it to 2 different servers. The 1st server using Slackware-9.1 which is already installed with libpng. it should be also libpng-dev or something like that, install this and try again! The 2nd using old Slackware 8.0 without libpng. This is where i tried to installed NTOP and having problem with instalation. This is what happened to my machine: checking for png.h... yes checking for main in -lpng... no *** * * ERROR: libpng header or library routines are missing * (yes means it was found, no means it was not found) * * png.h...yes * png_read_info() in -lpng... * * No way to proceed. * *???Install libpng (and/or libpng-devel), check www.libpng.org *???and Rerun ./configure * *** Though i ve installed LibPNG-1.2.5 with default installation. I need help for this problem, thanks before.. Regards, Rio Martin. ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop - -- Keine Software-Patente in Europa Wir protestieren gegen Software-Patente in Europa. Die EU-Kommission und der Ministerrat bemühen sich im Verborgenen um unbegrenzte Patentierbarkeit von Software, wie von internationalen Großkonzernen und Patentanwälten gefordert. Sie ignorieren dabei die demokratische Entscheidung des Europa-Parlamentes vom 24. September 2003, welche die Unterstützung von mehr als 300.000 Bürgern, 2.000.000 Kleinen mittelständischen Firmen und Dutzenden von Ökonomen und Wissenschaftlern genießt. Darüber hinaus können Sie uns unterstützen, indem Sie den Aufruf zum Handeln II des FFII e.V. unterzeichnen. http://www.ffii.org/ffii-cgi/aktiv?f=euparll=de Vielen Dank, Joachim Schiele -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFAnxWbyzk1c1T5Os4RAqBmAJ0Xaz51llXa2CM2Ie2hUeMjMb05mwCdFpnl TGqpKm3D8u9hb2NeTJKKj40= =aZ3k -END PGP SIGNATURE- ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] New to NTOP and list
Download the lastest CVS. Read howto here http://www.ntop.org/download.html Then once you have the cvs tree cd into ntop/docs/ and you'll find most of the documentation you'll need. Reading the back traffic at http://lists.ntop.org/pipermail/ntop/ and look for Redhat 9 issues. (Also you can search at http://www.gmane.org/ and find more info on Burton's site http://www.ntopsupport.com ) Linux is usually the easiest platform to get Ntop running on. Mike Tremaine [EMAIL PROTECTED] On Mon, 2003-11-24 at 11:25, Jennifer Fountain wrote: Hi Guys, I am new to using NTOP and trying to install this on redhat 9.0. Problem is - not sure where to begin. Can someone point me to a installations document that tells me what the prereq installs are, etc? Any info would be greatly appreciated. *** Thank you Jennifer Fountain ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] New to NTOP and list
Read the files in docs/ maybe - esp. BUILD-NTOP.txt and FAQ. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jennifer Fountain Sent: Monday, November 24, 2003 1:26 PM To: [EMAIL PROTECTED] Subject: [Ntop] New to NTOP and list Hi Guys, I am new to using NTOP and trying to install this on redhat 9.0. Problem is - not sure where to begin. Can someone point me to a installations document that tells me what the prereq installs are, etc? Any info would be greatly appreciated. *** Thank you Jennifer Fountain ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] New to NTOP and list
Title: Re: [Ntop] New to NTOP and list Bad idea. That's version 2.2, which is unsupported. There's an rpm for 2.2c at SourceForge, but there's a heck of a difference between 2.2c and 2.2.9x (the cvs version)... -Burton -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Kaczmarek, ThaddeusSent: Monday, November 24, 2003 2:05 PMTo: [EMAIL PROTECTED]Subject: Re: [Ntop] New to NTOP and list http://dag.wieers.com/ Install apt, add dag's repository. apt-get update apt-get install ntop Much simpler that building from cvs :-) Ted On Mon, 2003-11-24 at 14:25, Jennifer Fountain wrote: Hi Guys, I am new to using NTOP and trying to install this on redhat 9.0. Problem is - not sure where to begin. Can someone point me to a installations document that tells me what the prereq installs are, etc? Any info would be greatly appreciated. *** Thank you Jennifer Fountain ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop DISCLAIMER e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me and permanently delete the original and any copy of any e-mail and any printout thereof. E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. REGARDING PRIVACY AND CONFIDENTIALITY Crown Financial Group may, at its discretion, monitor and review the content of all e-mail communications.
RE: [Ntop] New to NTOP and list
Title: RE: [Ntop] New to NTOP and list Guess I will be building the rpm then :-) Is cvs known to consistently build? Ted On Mon, 2003-11-24 at 15:21, Burton M. Strauss III wrote: Bad idea. That's version 2.2, which is unsupported. There's an rpm for 2.2c at SourceForge, but there's a heck of a difference between 2.2c and 2.2.9x (the cvs version)... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kaczmarek, Thaddeus Sent: Monday, November 24, 2003 2:05 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop] New to NTOP and list http://dag.wieers.com/ Install apt, add dag's repository. apt-get update apt-get install ntop Much simpler that building from cvs :-) Ted On Mon, 2003-11-24 at 14:25, Jennifer Fountain wrote: Hi Guys, I am new to using NTOP and trying to install this on redhat 9.0. Problem is - not sure where to begin. Can someone point me to a installations document that tells me what the prereq installs are, etc? Any info would be greatly appreciated. *** Thank you Jennifer Fountain ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop DISCLAIMER e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me and permanently delete the original and any copy of any e-mail and any printout thereof. E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. REGARDING PRIVACY AND CONFIDENTIALITY Crown Financial Group may, at its discretion, monitor and review the content of all e-mail communications. DISCLAIMER e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me and permanently delete the original and any copy of any e-mail and any printout thereof. E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. REGARDING PRIVACY AND CONFIDENTIALITY Crown Financial Group may, at its discretion, monitor and review the content of all e-mail communications.
RE: [Ntop] New to NTOP and list
Title: RE: [Ntop] New to NTOP and list Well, it's a development version, so it's always possible for things to break, but both Luca and I test things pretty carefully before committing them. Since we both work in Linux, that's pretty safe. Luca does a lot with Mac OS X too, so that's ok. I try and keep an eye on FreeBSD and Stanley keeps me honest there. The other versions (really only Win32 and Solaris) may occasionally have problems butLuca seems to check them every few weeks. So stuff doesn't stay broken for long... -Burton -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Kaczmarek, ThaddeusSent: Monday, November 24, 2003 2:30 PMTo: [EMAIL PROTECTED]Subject: RE: [Ntop] New to NTOP and list Guess I will be building the rpm then :-) Is cvs known to consistently build? Ted On Mon, 2003-11-24 at 15:21, Burton M. Strauss III wrote: Bad idea. That's version 2.2, which is unsupported. There's an rpm for 2.2c at SourceForge, but there's a heck of a difference between 2.2c and 2.2.9x (the cvs version)...-Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kaczmarek, Thaddeus Sent: Monday, November 24, 2003 2:05 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop] New to NTOP and list http://dag.wieers.com/ Install apt, add dag's repository. apt-get update apt-get install ntop Much simpler that building from cvs :-) Ted On Mon, 2003-11-24 at 14:25, Jennifer Fountain wrote: Hi Guys, I am new to using NTOP and trying to install this on redhat 9.0. Problem is - not sure where to begin. Can someone point me to a installations document that tells me what the prereq installs are, etc? Any info would be greatly appreciated. *** Thank you Jennifer Fountain ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop DISCLAIMER e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me and permanently delete the original and any copy of any e-mail and any printout thereof. E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. REGARDING PRIVACY AND CONFIDENTIALITY Crown Financial Group may, at its discretion, monitor and review the content of all e-mail communications. DISCLAIMER e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me and permanently delete the original and any copy of any e-mail and any printout thereof. E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. REGARDING PRIVACY AND CONFIDENTIALITY Crown Financial Group may, at its discretion, monitor and review the content of all e-mail communications.
RE: [Ntop] New to ntop
(Excerpted Slightly updated from a 07Jan2001 post to ntop and ntop-dev) We don't mind helping people, but you do have to give the rest of the people monitoring this mailing list some basic information. I've given notice that I will not reply to ANY NTop has a bug messages unless you provide some reasonable information about your configuration! (If you don't like it, ask somebody else to support you... I don't think it's unreasonable to ask it... If you're uncomfortable giving specifics (such as which mail server, then leave it generic)) Specifically: Hardware Type # of processors Amount of memory # network interfaces and types (vendor, bus, etc.) Software NTop version, source and any applied patches If you've compiled from the source, say so! If you're using a package (such as an .rpm), where did you get it from and what is the EXACT name? The EXACT command line you are using to invoke NTop OS vendor version Any major upgrades (kernel, networking, etc.) gcc version (e.g. gcc --version) glibc version What else is running Network Roughly where are the interface(s) you're monitoring (Public Internet, Private LAN, what?) What's the bandwidth (e.g. 10 Mbps University internet, 1.5 Mbps T1, CableModem capped at 1.5Mbps, 56K dialup) How many machines (traffic sources/destinations) and users I will comment that your other post shows you using -i eth0, but your ifconfig shows the device is named en0... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jacco Rens Sent: Saturday, February 09, 2002 9:51 AM To: [EMAIL PROTECTED] Subject: [Ntop] New to ntop Hi list, since i'm new to all UNIX network tools, i'm not sure how to get beyond my problem; Wait please: ntop is coming up... 09/Feb/2002 16:47:02 Initializing IP services... 09/Feb/2002 16:47:03 Initializing GDBM... 09/Feb/2002 16:47:03 Initializing network devices... 09/Feb/2002 16:47:03 Unable to locate default interface (no suitable device found) although my en0 is up; ifconfig en0 en0: flags=8863UP,BROADCAST,b6,RUNNING,SIMPLEX,MULTICAST mtu 1500 inet 192.168.1.200 netmask 0xff00 broadcast 192.168.1.255 ether 00:0a:27:97:bf:26 media: autoselect (100baseTX full-duplex) status: active what should i do now ? -- Best, Jacco Rens Netherlands ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
Re: [Ntop] New to ntop #2
On Sat, Feb 09, 2002 at 05:20:19PM +0100, Jacco Rens wrote: i came to this idea, but still no result :-( [localhost:local/ntop/bin] jacco% sudo ./ntop -i eth0 s/eth0/en0/ ... means replace eth0 with en0. Ciao Dennis -- http://cns.dnsalias.org/misc/odyssey.txt ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
Re: [Ntop] New to ntop #2
On Saturday 09 February 2002 5:20 pm, Jacco Rens wrote: i came to this idea, but still no result :-( [localhost:local/ntop/bin] jacco% sudo ./ntop -i eth0 Password: Wait please: ntop is coming up... 09/Feb/2002 17:04:09 Initializing IP services... 09/Feb/2002 17:04:09 Initializing GDBM... 09/Feb/2002 17:04:09 Initializing network devices... 09/Feb/2002 17:04:09 ntop v.2.0.1 MT [powerpc-apple-darwin5.2] (01/10/02 10:08:09 AM build) 09/Feb/2002 17:04:09 Listening on [eth0] 09/Feb/2002 17:04:09 Copyright 1998-2002 by Luca Deri [EMAIL PROTECTED] 09/Feb/2002 17:04:09 Get the freshest ntop from http://www.ntop.org/ 09/Feb/2002 17:04:09 Initializing... 09/Feb/2002 17:04:09 BIOCSETIF: eth0: Device not configured 09/Feb/2002 17:04:09 Please select another interface using the -i flag. so how do i configure en0 ?? help ntop mailing list readers to help you:- please supply 1) O/S version 2) Ntop Version 3) How installed /compiled , where you got it from 4) command line used to start ntop 5) any other info that may be relevant because as I have discovered, if you don't, aint no one gonna even look at your problem. -- I'm not stupid, I'm not expendable, and I'M NOT GOING! ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] New to ntop #2
Ntop -i en0 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jacco Rens Sent: 09 February 2002 16:20 To: [EMAIL PROTECTED] Subject: [Ntop] New to ntop #2 i came to this idea, but still no result :-( [localhost:local/ntop/bin] jacco% sudo ./ntop -i eth0 Password: Wait please: ntop is coming up... 09/Feb/2002 17:04:09 Initializing IP services... 09/Feb/2002 17:04:09 Initializing GDBM... 09/Feb/2002 17:04:09 Initializing network devices... 09/Feb/2002 17:04:09 ntop v.2.0.1 MT [powerpc-apple-darwin5.2] (01/10/02 10:08:09 AM build) 09/Feb/2002 17:04:09 Listening on [eth0] 09/Feb/2002 17:04:09 Copyright 1998-2002 by Luca Deri [EMAIL PROTECTED] 09/Feb/2002 17:04:09 Get the freshest ntop from http://www.ntop.org/ 09/Feb/2002 17:04:09 Initializing... 09/Feb/2002 17:04:09 BIOCSETIF: eth0: Device not configured 09/Feb/2002 17:04:09 Please select another interface using the -i flag. so how do i configure en0 ?? -- Best, Jacco Rens Netherlands ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
