Hello list! I am running the ntop v.3.4-pre3 (32 bit) [WinNT/2K/XP/Vista/Win7] version, and the associated included LIBs/.
My problem: All the hosts on the far side of my MPLS WAN are displayed as a single host in ntop. The remote WAN subnet: 10.60.20.0/22 The local subnet: 10.60.4.0/22 All the local traffic is correct and shows all hosts. But in the list for WAN range I see a single IP: 10.60.22.15 and the statistics seem to a collective value for all traffic on the WAN subnet. I think this maybe due the fact that all the traffic from the Cisco WAN router is being tagged with the same MAC address? I have all ready turned off the "trust MAC" option in the configuration of Ntop. There is also a barracuda webfilter in the mix, and I will now crudely show my devices and how they interconnect. LAN: ISP -> Cisco Router -> Cisco PIX 515 -> Barracuda Webfilter -> HP Procurve gig switch -> mirrored webfilter port -> Ntop collector WAN: Cisco Router -> HP Procurve gig switch I am trying to find some problem hosts, and I think they are on the WAN side, so currently I can't solve the problem at hand. I can upload configs or the like if it will help in finding the solution. Thanks for any help you can provide! -Eric _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
