Anthony, sorry but i do not understand. Suppose workstation is 192.168.1.2 and connects to youtube 64.15.126.98 using a NAT address a.b.c.d
If you analyse traffic on the internal interface, you will see 192.168.1.2 <-> 64.15.126.98, whereas on the extern a.b.c.d <-> 64.15.126.98. THis with the ntopng and ntop. if I understand correctly you would like to see if ntopng can say that 192.168.1.2 is mapped to a.b.c.d? Luca On Oct 5, 2013, at 11:35 AM, Anthony Kehoe <[email protected]> wrote: > The original ntop was able to inspect traffic on multiple interfaces and > recognise the internal address spaces versus the remote. You could then > switch remote/local on the same view to see the associated flows. In ntopng, > you have to switch the interface that is primary, but then it shows all the > destinations as the firewall/NAT device. It's not able to see the end-to-end. > I'm really looking for a view where you can see the internal machine, and the > destination outside the local network. For example, workstation1 connecting > to www.youtube.com . At the moment, all you can see is workstation1 > connecting the the NAT device, switch the interface, and see the NAT device > connecting to www.youtube.com . It's not possible to see that it's > workstation1 connecting to www.youtube.com . Am I making sense? > > > On 5 October 2013 00:21, Luca Deri <[email protected]> wrote: > Anthony, > can you please explain what you expect to see "how to get it to analyse > end-to-end"? What stats would you like to see? > > Regards Luca > > On Oct 5, 2013, at 12:33 AM, Anthony Kehoe <[email protected]> wrote: > >> Hi there, >> >> I'm running the latest SVN of ntopng on my fedora 19 box with 5 network >> interfaces. The primary traffic I'm interested in getting flow information >> for internal machines (eth1) NATting through the fedora box, out eth0. I >> have ntopng collecting information from eth0, but I can't seem to figure out >> how to get it to analyse end-to-end (source is on eth1, destination NAT >> through eth0). Here is my command line: >> >> ntopng -v /etc/ntopng/ntopng.conf --local-networks "10.202.0.0/16" >> --interface eth0 --interface eth1 --interface eth2 --interface tun0 >> --interface tun1 --dont-change-user -A 2 >> >> Can ntopng do this? >> >> Thanks, >> Anthony >> _______________________________________________ >> Ntop-dev mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-dev > > > _______________________________________________ > Ntop-dev mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev > > > _______________________________________________ > Ntop-dev mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev
_______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
