Check and see which interface(s) ntop is listening on. If it's the external interface, then it will see all of the traffic with the same mac address...
-----Burton ---------- Original Message ---------------------------------- From: Darren Bentley <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: 25 Mar 2003 16:48:02 -0800 >On Tue, 2003-03-25 at 16:32, Burton M. Strauss III wrote: >> Not sure without more info on the physical network layout... > >Max4000(dialup customers)--3Com Switch--Linux Gateway Router--T1 line > >> >> Thoughts: >> >> Are you seeing the traffic before or after any NAT?? > >No NAT. Squid was the culprit for 2 out of the 3. We are shooting >wireless to different towns. >> >> If they're using the same physical interface, then ntop is correct. It's >> multi-homed. >> >> Look into the -o | --no-mac parameter - it will lose some information, but >> it uses only the ip addresses. > >I'll give that a shot. > >Thanks, > >- Darren > >> >> -----Burton >> >> >> -----Original Message----- >> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of >> Darren Bentley >> Sent: Tuesday, March 25, 2003 6:29 PM >> To: [EMAIL PROTECTED] >> Subject: [Ntop] clumping ips together, showing as multihomed? >> >> >> Hello, >> >> Our main gateway router: ntop-2.1.90-0 / RH 7.3 >> >> Here is my ntop.conf: >> >> -u ntop >> -P /usr/share/ntop >> -i eth1 >> -w 0 >> -W 3005 >> -m 204.244.XXX.0/24,204.244.XXX.0/24,204.244.XXX.0/24,204.244.XXX.0 >> -d >> >> We have 3 dial-up communities and each are showing as 1 ip in NTOP. Why >> is it clumping them all together? It shows the "multihomed" image beside >> the address. >> >> Any help would be appreciated. >> >> Thanks, >> >> - Darren >> >> _______________________________________________ >> Ntop mailing list >> [EMAIL PROTECTED] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> _______________________________________________ >> Ntop mailing list >> [EMAIL PROTECTED] >> http://listgateway.unipi.it/mailman/listinfo/ntop > >_______________________________________________ >Ntop mailing list >[EMAIL PROTECTED] >http://listgateway.unipi.it/mailman/listinfo/ntop > ____________________________________________________________ Free 20MB Web Site Hosting and Personalized E-mail Service! Get It Now At Doteasy.com http://www.doteasy.com/et/ _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
