Hi, There is a bug in initDevice (initialize.c).
As of version 3.1.2, at line 1463 initialize.c: if(myGlobals.runningPref.enableSuspiciousPacketDump) { safe_snprintf(__FILE__, __LINE__, myName, sizeof(myName), "%s%cntop-suspicious-pkts.%s.pcap", myGlobals.runningPref.pcapLogBasePath, /* Added by Ola Lundqvist <[EMAIL PROTECTED]> */ CONST_PATH_SEP, myGlobals.device[0].humanFriendlyName != NULL ? myGlobals.device[0].humanFriendlyName : myGlobals.device[0].name); myGlobals.device[0].pcapErrDumper = pcap_dump_open(myGlobals.device[0].pcapPtr, myName); When ntop is reading from a dump file in other directory, there are "/"s in myGlobals.device[0].humanFriendlyName. And this will result in pcap_dump_open to return null. A way to get around is to replace all the "/"s with other characters or simply using only the name of the dump file. Hope this may help:) _______________________________________________ Ntop-dev mailing list Ntop-dev@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop-dev