Hi Michael, >>So far... you have got too much traffic? If you don't need the info >>about hosts outside your net, you can map the hosts outside your net to >>a single host: in pbuf.c, function processIpPkt: after >>"NTOHL(ip.ip_src.s_addr);" add code that changes the src or dst IP >>address if it doesn't belong to your net and in the function >>handleTCPSession add at the beginning "return NULL;". It worked for me >>and you have much less hosts in your hash speeding ntop up very much. I >>don't give any warranty... The advantage is that ntop works much faster >>and displays only your hosts, the disadvantages are that you don't have
>If this is interesting for others, I could try to integrate this in a >more userfriendly way into ntop so that Luca can integrate this into a >new version of ntop (of course after he released ntop 2.0). Otherwise >I'll don't do this extra work, because for me it works fine. This would be extremely useful for me; until a complete solution is found for speeding up the hash routines, this would be an excellent addition. I would love to help, but C coding skills aren't my strength, so anything you can do and release into the CVS (post 2.0) would be greatly appreciated! Cheers, Matt _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
