Frankly, I think that whatever worked in Feb was a side effect of the traffic mis-classification that broke ntop for all of the rest of us...
Luca has been working on some code, related to myGlobals.dontTrustMACaddr. No clue what state it's in. He has NOT exposed this through a command line switch. Right now, -j sets it to 1 and no -j to zero. It's only referenced in a couple of places... Although there is a constant, NTOP_DEFAULT_DONT_TRUST_MAC_ADDR referenced in globals-core.h (around 132) in the current cvs (post RC2), you'll find that the logic in initialize.c around 441 overrides that. No clue whether it works or would meet your needs (I doubt it), but you could look at enabling this. You could try defining PRINT_ALL_ACTIVE_SESSIONS in reportUtils.c Otherwise, you probably need to debug handleSession() in sessions.c... that appears to be where the session is being stored. Regardless, let us know... -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Igor Schein Sent: Wednesday, June 05, 2002 4:46 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop-dev] RC21BUG: Active TCP Sessions On Wed, Jun 05, 2002 at 04:38:48PM -0500, Burton M. Strauss III wrote: > Are you using -j (--border-sniffer-mode)? > > -----Burton When I use -j, no data is being collected. Again, with Feb 15 snapshot, Active sessions were working without -j flag. Igor > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf > Of Igor Schein > Sent: Wednesday, June 05, 2002 2:28 PM > To: [EMAIL PROTECTED] > Subject: [Ntop-dev] RC21BUG: Active TCP Sessions > > > Hi, > > I am using 2.0.99-rc2 on Linux. All Ethernet traffic is being > mirrored to a single port on an Extreme Network switch. on which I'm > listening. Configuration page says that TCP Session Handling is > enabled, however I see "No Active TCP Sessions" under > IP Protos/Sessions/Active TCP Sessions. > > I've already posted several times on this subject. Last time TCP > sessions worked for me was with Feb snapshot. I don't see anything in > ChangeLog which would indicated a change of behavior. > > Thanks > > Igor > _______________________________________________ > Ntop-dev mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev > > _______________________________________________ > Ntop-dev mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev _______________________________________________ Ntop-dev mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop-dev _______________________________________________ Ntop-dev mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
