Hello Igor,

I have 4 interfaces on the machine where I am running NTOP.
I am monitoring 3 class C networks (the 4th is an internal lan).
Total traffic volume around 2 megabits. 

All four NICS are attached to  'normal' hubs not switches, so for me the -m 
works fine.

Earl

On Monday 15 July 2002 04:28 pm, Igor Schein wrote:
> On Mon, Jul 15, 2002 at 03:59:23PM -0400, Earl C. Terwilliger wrote:
> > Hello Igor,
> >
> > I had the same problem. I got sessions in 2.0 but when I switched to 2.1
> > RCs or 2.1 I got no sessions.
> >
> > Burton advised me to use the -m  parm. It worked for me!
> > I had to use -m "xxx.xxx.xx.0/24,xxx.xxx.xx.0/24,xx.xxx.xx.0/24" and it
> > works fine now on the three interfaces I monitor.
> >
> > When you say the -m does not work correctly, could you please send the
> > -m parm you are using and what happens that lets you believe it is not
> > working correctly?
>
> When I use -m as you describe above, I do see sessions, but all of
> them are displayed as being originated from the same IP address.
> Burton said it has to do with mac address getting substituted when a
> packet goes from one switch to the other, but it did work fine in
> 2.0!! How come the original mac address wasn't getting lost back then?
>
> Thanks
>
> Igor
>
> P.S. How many interfaces do you have on the host where you run
> ntop?  I have 2, and I suspect that might be preseting a problem
> for ntop.
>
> _______________________________________________
> Ntop-dev mailing list
> [EMAIL PROTECTED]
> http://lists.ntop.org/mailman/listinfo/ntop-dev

_______________________________________________
Ntop-dev mailing list
[EMAIL PROTECTED]
http://lists.ntop.org/mailman/listinfo/ntop-dev

Reply via email to