If you span the port, you'll need to turn off ntop's usage of MAC addresses.
You lose the MAC -> Vendor translation and the non-IP stuff (DHCP, IPX,
Spanning Tree, etc).

Look in the code for myGlobals.dontTrustMACaddr

It depends upon whether that's important to you.

-----Burton



-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John
Hally
Sent: Thursday, February 20, 2003 6:54 AM
To: '[EMAIL PROTECTED]'
Subject: [Ntop] To span or not to span



Hello everyone, I need a sanity check here.  We have our network set up so
that all  traffic collapses down to an ingress/egress vlan where the inside
interface of the firewall resides.  All traffic inbound and outbound has to
pass through this vlan.

It makes sense then to place the Ntop interface in this vlan, but does it
make sense to span the firewall's internal interface, the entire vlan, or
not at all, to get the best statistics?

Thanks in Advance.
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to