> -----Original Message----- > From: Burton M. Strauss III [mailto:[EMAIL PROTECTED]] > Sent: Thursday, 02 May, 2002 18:50 > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: RE: [Ntop] ntop filter expression
> You also need > to enclose the -m parameters in "s to getopt sees it as ONE > parameter... Yes, I had the -m parameter in "s. This is the exaxt command I run: "C:\Program Files\ntop-Win32\ntop.exe" -m "54.111.0.0/16" "src host 54.111.51.32 or dst host 54.111.51.32" I even tried without the -m parameter just with the filter to test the filter - same result. > In 2.0.99 versions, you must use the -B option to add a > filter. > A quick check of 2.0 doesn't show the -B code I was looking > for. ntop 2.0 seems > to depend on getopt: "The default is to permute the contents > of argv while > scanning it so that eventually all the non-options are at the > end. This allows > options to be given in any order, even with programs that > were not written to > expect this." I do not have version 2.0.99. You're right that 2.0 does not support -B parameter. If I use that it will just show help. I also tried to write "host 54.111.51.32" in a file rules.txt and then use -R parameter. When ntop start it will say Parsing ntop rules... but I can still see traffic from the other hosts which do not have any communication with 54.111.51.32. I did check it by checking the contacted peers on the host info. I also tried to filter on non-exting address (so the hosts list shoudl be empty)...it always show the same result. Thanks for your help. V. ------------------------------------------------------------------------------ Notice: This e-mail message, together with any attachments, contains information of Merck & Co., Inc. (Whitehouse Station, New Jersey, USA) that may be confidential, proprietary copyrighted and/or legally privileged, and is intended solely for the use of the individual or entity named on this message. If you are not the intended recipient, and have received this message in error, please immediately return this by e-mail and then delete it. ============================================================================== _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
