And a few other points ...

1) If you dont span the port you are only going to
collect stats on broadcasts.

2) It probably does not make sense to span the VLAN
unless you are concerned about local traffic between
local hosts.  Spanning the VLAN will pick up all
communications in the VLAN.

3)  Span the port and you collect stats on all traffic
flows through the firewall inside port.

What matters is really what stats you are most
interested in collecting.

--Blake



--- "Burton M. Strauss III" <[EMAIL PROTECTED]>
wrote:
> If you span the port, you'll need to turn off ntop's
> usage of MAC addresses.
> You lose the MAC -> Vendor translation and the
> non-IP stuff (DHCP, IPX,
> Spanning Tree, etc).
> 
> Look in the code for myGlobals.dontTrustMACaddr
> 
> It depends upon whether that's important to you.
> 
> -----Burton
> 
> 
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of John
> Hally
> Sent: Thursday, February 20, 2003 6:54 AM
> To: '[EMAIL PROTECTED]'
> Subject: [Ntop] To span or not to span
> 
> 
> 
> Hello everyone, I need a sanity check here.  We have
> our network set up so
> that all  traffic collapses down to an
> ingress/egress vlan where the inside
> interface of the firewall resides.  All traffic
> inbound and outbound has to
> pass through this vlan.
> 
> It makes sense then to place the Ntop interface in
> this vlan, but does it
> make sense to span the firewall's internal
> interface, the entire vlan, or
> not at all, to get the best statistics?
> 
> Thanks in Advance.
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop
> 
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop


__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to