Even if I choose All protocols --> Traffic . I choose Hosts: All , I
can't see all the remote hosts. But for a while I could see some remote
hosts which than disappeared. What is the effective time range for All
protocols --> Traffic ?
Where are the parameters saved if I use the web interface for changing
the configuration(Admin-->Configure-->Startup options)?
I noticed that if I modify /etc/ntop.conf it overrides the web config
settings. Is that right?
If I modify the /etc/ntop.conf, how can I make the settings effective
without losing the recorded traffic?
On 27.04.2010 17:45, Gary Gatten wrote:
There's a startup arg to specify which network ranges are local, it might be
-b? Check the man and make sure you have this configured correctly for your
environment.
----- Original Message -----
From: [email protected]<[email protected]>
To: [email protected]<[email protected]>
Sent: Tue Apr 27 09:38:42 2010
Subject: Re: [Ntop] how to monitor http and https only
Ok, I got confused. Ntop is set on my Centos router. All the internet
traffic goes through it.
I go on the web interface All protocols --> Traffic . I choose Hosts:
Remote only and I see only some of the remote hosts. I don't understand.
Where can I see all the remote hosts which were accessed today?
Istvan
On 26.04.2010 18:34, Gary Gatten wrote:
You can't disable "everything", but with packet and protocol filters, and by
viewing specific reports - you can get pretty close to what you need.
----- Original Message -----
From: [email protected]<[email protected]>
To: [email protected]<[email protected]>
Sent: Mon Apr 26 09:31:35 2010
Subject: Re: [Ntop] how to monitor http and https only
Thanks for the hints. But there is still too much information.
All I want is:
- 192.168.0.xxx, between 08:00-14:00, accessed the following sites: ...
- www.facebook.com, between 08:00-14:00, was accessed by the following
local IP-s: ...
I don't need the:
- Host Traffic Stats
- Packet Statistics
- Protocol Distribution
- TCP/UDP Recently Used Ports
- IP Service Stats: Client Role
- TCP/UDP - Traffic on Other Ports
How can I do all these?
Istvan
On 26.04.2010 17:12, Gary Gatten wrote:
Good call. One can also restrict the displayed protocols with -p, all remaining traffic
will be displayed as "other"
----- Original Message -----
From: [email protected]<[email protected]>
To: [email protected]<[email protected]>;
[email protected]<[email protected]>
Sent: Mon Apr 26 08:44:04 2010
Subject: Re: [Ntop] how to monitor http and https only
Have you taken a look at the manpages for ntop? On a unix system, the "-B"
switch followed by a pcap expression will give you want you want.
e.g
ntop -d -w 8080 -B "port 80 or 443"
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Istvan Köpe
Sent: Monday, April 26, 2010 9:40 AM
To: [email protected]
Subject: [Ntop] how to monitor http and https only
Hello,
I just installed ntop and it gives me much more information I need. I
would like to see only the traffic on ports 80 and 443.
How can I do that?
Istvan
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
