>Brock Henry - [EMAIL PROTECTED] >Where does this list of other ports end up? I'd like to define a few more >of them. > I ususally create a text file (called protocols.list but you can call it whatever you want) that looks something like the following:
FTP=ftp|ftp-data,HTTP=http|www|https|3000,Proxy=8000|8080,DNS=name|domain,Telnet=telnet|login,NBios-IP=netbios-ns|netbios-dgm|netbios-ssn|microsoft-ds,Firstlass=510|2317,Oracle=1521,FileMaker=5003,Citrix=ica,Timbuktu=407|1417-1420,Mail=pop-2|pop-3|kp op|smtp|imap|imap2,SNMP=snmp|snmp-trap,NEWS=nntp,NFS=mount|pcnfs|bwnfs|nfs|nfsd-status,X11=6000-6010,SSH=ssh,Streaming Media=1755|554,Morpheus=1214 That's all one line, no breaks (I'd like to see this change maybe, it gets a bit hard to edit when it gets fairly large). basically specify the heading you want to show up on the report, then '=' then the protocol (defined in /etc/protocols) or port number you want to monitor (if there are multiple ports for a heading seperate them by a pipe, for a range you can specify startingport-endport then a comma to indicate the end of the protocol. When running ntop from the commandline, add '-p protocol.list' (it looks in the current working directory) Hope this helps > Stephen Elaschuk Computer Technician Alberta Distance Learning Centre (780) 674-5333 Ext. 291 Toll Free 310-0000 674-5333 ext. 291 [EMAIL PROTECTED] _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
