Hello, Actually I need to be more specific. I am seeing data rcvd/sent from IPs not part of this block but it is SESSIONSs that I am not seeing. I only see sessions for IPs on my IP block.
Is there something else I need to add as a paramater? Here is how I start NTOP now: ntop -d -i "eth0,eth1,eth2" -n -E -M -L -S 2 -P /temp -u ntop -W 0 Earl On Tuesday 09 July 2002 09:32 am, Earl C. Terwilliger wrote: > Hello, > > I am having a problem with capturing all IP data on an interface, > running RedHat 7.3 and the current Ntop. > > My IP for example is xxx.xxx.xxx.138 with a subnet mask of > 255.255.255.240. When I put the subnet mask as 255.255.255.0 I am able to > capture all traffic (even for IPs not on this network). But I need the > correct subnet mask for routing. So I put the interface in promiscous mode > with : ifconfig eth3 promisc > > Now I am only seeing traffic for IPs within the block masked off. If I use > tcpdump I am able to see all traffic but not with NTOP. > > What am I doing wrong? > > Thanks, > Earl > > _______________________________________________ > Ntop-dev mailing list > [EMAIL PROTECTED] > http://lists.ntop.org/mailman/listinfo/ntop-dev _______________________________________________ Ntop-dev mailing list [EMAIL PROTECTED] http://lists.ntop.org/mailman/listinfo/ntop-dev
