Hi all,
ntop takes the MAC addresses of the hosts in the nets specified via the
-m command line switch (considered as pseudo-local) to distinguish
between them.
Does anyone need this feature or what could this be good for? Why don't
you take the IP addresses for hosts which are only
Eric,
as you stated ntop identifies the hosts using:
- MAC addresses if hosts are local
- IP address if they are not local
I have a couple of weeks ago I have patched ntop in order to handle
situations asa those you mentioned so it should work out of the box.
Nevertheless ntop is not a wizard so
Hello,
Im having an issue using NTOP outside a
firewall. All of my
externally-accessible hosts are accessed through a one-to-one NAT through my
firewall. This causes each publicly
accessible IP to have the same MAC address. In most packet sniffers
this isnt a problem as it identifies
