monitor session 10 source interface interface name
monitor session 10 destination interface interface name
If you need to still be able to ping/web into the box connected on the span
port you need to add ingress and some options to the end of the destination
session.
Thanks
Scott
On 2/21/07,
The commands we use on Cisco 2500 routers are
On the interface you wish to monitor: ip route-cache flow
Global statement: ip flow-export destination destination address
destination port
The problem is however that cisco seems to be going away from netflow. We
are replacing our 2500
for your help.
On 12/1/06, Scott Huffman [EMAIL PROTECTED] wrote:
The commands we use on Cisco 2500 routers are
On the interface you wish to monitor: ip route-cache flow
Global statement: ip flow-export destination destination address
destination port
The problem is however that cisco
Steve, You will have to put on an ingress filter to allow your outside traffic to get to the ntop server. I have 2 vlans on a cisco 3560, one for the customer. Vlan 40 is the link to our data center, and 41 the user link. Below are the commands that I use.
monitor session 11 source interface
Are there any vlans? Or could you create them? I'm pretty sure on a cisco switch you can mirror (span) a port to monitor a whole vlan. On 12/29/05, Colombo Alessandro
[EMAIL PROTECTED] wrote:
Hello,
I'm having problems capturing packets with my
Linux box.
The LB runs Fedora Core 4
Not a nice solution, but a workaround is to delete all the *.db files
in the /usr/local/var/ntop/ directory. This worked for me.
I have written a script that deletes all the .db files before starting
ntop each time. I have tried making sure that the correct user
has the correct permissions, and it
use the -i flag followed by none.
./ntop -i none
also make sure to switch your NIC to the netflow interface. Admin - Switch NIC.
ScottOn 11/8/05, Evert Meulie [EMAIL PROTECTED] wrote:
Hi all!How do I instruct ntop to not monitor any of the local devices, but onlyprocess the data coming from the
I have found that if I delete all the .db files in /opt/local/var/ntop
except the ntop_pw.db file before running ntop, it doesn't crash on
shutdown. Something I guess about appending to an existing file
possibly? Not sure if this is a workaround for everyones
problems, or if others are having
I'm running ntop on mac osx 10.4.3. Most of the time when I shutdown
ntop, it crashes the mac with the black screen saying to power off the
mac. Then when I try to re-start ntop, after rebooting the box I
get gdbm read errors or read errors on prefsCache.db. If I delete
the prefsCache.db file it
I have found some similar problems. I installed ntop on mac os X
and have had it kernel panic a few times. I have not found a
resolution yet. One time when i restarted I was getting a gdbm
read error when I tried to re-start ntop. I found after some
research that deleteing or re-naming the files
10 matches
Mail list logo