Peter Matulis wrote:
>
> This is my command:
>
> ntop -i eth0 -p ip -w 3000
the -p option is "used to specify the IP _Protocols_ that ntop will
monitor ..." (cf man page ntop.8)
If you have no "unusual" protocol you want to monitor, don't use it. Or
use something like that :
ntop -i eth0 -p ntop.list -w 3000
where ntop.list looks like that :
FTP=ftp|ftp-data,HTTP=http|www|https,DNS=name|domain,Telnet=shell|telnet|login,NBios-IP=netbios-ns|netbios-dgm|netbios-ssn,Mail=pop2|pop3|kpop|smtp|imap3|imap2,SNMP=snmp|snmp-trap,NEWS=nntp,NFS=nfsd|mount|pcnfs|bwnfs|nfs|nfsd-status,X11=xdmcp|6000-6010,SSH=ssh|sftp,LDAP=ldap,portmap=111,epmap=135,microsoft-dn=445,isakmp=500,sunrpc=111,PROXY-WEB=webcache,UUCP=uucp,BOOTP=bootps|bootpc
(all on the same line)
Check that all the port names (https,webcache,...) are in your
/etc/services.
If you still have no data, try :
ntop -i eth0 -p ntop.list -w 3000 ip or icmp
--
Fr�d�ric Hermann | Soci�t� Ferma
Administrateur r�seau, Ferma Grenoble | 31 ch. du vieux ch�ne
Tel : +33 (0)4 76 61 79 01 | ZIRST
Fax : +33 (0)4 76 61 79 59 | 38240 MEYLAN FRANCE
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop
