If you span the port, you'll need to turn off ntop's usage of MAC addresses. You lose the MAC -> Vendor translation and the non-IP stuff (DHCP, IPX, Spanning Tree, etc).
Look in the code for myGlobals.dontTrustMACaddr It depends upon whether that's important to you. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John Hally Sent: Thursday, February 20, 2003 6:54 AM To: '[EMAIL PROTECTED]' Subject: [Ntop] To span or not to span Hello everyone, I need a sanity check here. We have our network set up so that all traffic collapses down to an ingress/egress vlan where the inside interface of the firewall resides. All traffic inbound and outbound has to pass through this vlan. It makes sense then to place the Ntop interface in this vlan, but does it make sense to span the firewall's internal interface, the entire vlan, or not at all, to get the best statistics? Thanks in Advance. _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
