The original ntop was able to inspect traffic on multiple interfaces and recognise the internal address spaces versus the remote. You could then switch remote/local on the same view to see the associated flows. In ntopng, you have to switch the interface that is primary, but then it shows all the destinations as the firewall/NAT device. It's not able to see the end-to-end. I'm really looking for a view where you can see the internal machine, and the destination outside the local network. For example, workstation1 connecting to www.youtube.com . At the moment, all you can see is workstation1 connecting the the NAT device, switch the interface, and see the NAT device connecting to www.youtube.com . It's not possible to see that it's workstation1 connecting to www.youtube.com . Am I making sense?
On 5 October 2013 00:21, Luca Deri <[email protected]> wrote: > Anthony, > can you please explain what you expect to see "how to get it to analyse > end-to-end"? What stats would you like to see? > > Regards Luca > > On Oct 5, 2013, at 12:33 AM, Anthony Kehoe <[email protected]> wrote: > > Hi there, > > I'm running the latest SVN of ntopng on my fedora 19 box with 5 network > interfaces. The primary traffic I'm interested in getting flow information > for internal machines (eth1) NATting through the fedora box, out eth0. I > have ntopng collecting information from eth0, but I can't seem to figure > out how to get it to analyse end-to-end (source is on eth1, destination NAT > through eth0). Here is my command line: > > ntopng -v /etc/ntopng/ntopng.conf --local-networks "10.202.0.0/16" > --interface eth0 --interface eth1 --interface eth2 --interface tun0 > --interface tun1 --dont-change-user -A 2 > > Can ntopng do this? > > Thanks, > Anthony > _______________________________________________ > Ntop-dev mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev > > > > _______________________________________________ > Ntop-dev mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev > >
_______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
