Very first question about ntop, so please set flame-throwers to 'singe only' if this is a question which (i) has been asked too many times before, or (ii) is answered if I RTFM (which I have tried).
Just downloaded and built ntop 2.1.90. Running it on a RH 7.3 system. Build went fine, and I've managed to get the basics functioning. Pretty slick, for my cursory explorations so far.
However, the one thing that isn't obvious to me is how to restrict information in the output - basically, creating filters. Suppose I have a host called
bozo.clown.school.edu
I want to look at all traffic generated by this host, excluding any traffic to/from the entire .school.edu domain.
I've managed to get started in the right direction, at least, using
src host bozo.clown.school.edu or dst host bozo.clow.schoo.edu
as a filter, to a least restrict things to traffic to/from this host only.
But, I need the additional filter to exclude anything generated from within the .school.edu domain.
Can anyone help?
Thanks!
---------------------------------------------------------------------- Evan Cooch e.mail: [EMAIL PROTECTED] Department of Natural Resources voice: 607-255-1368 Fernow Hall - Cornell University FAX: 607-255-0349 Ithaca, NY 14853 http://canuck.dnr.cornell.edu ---------------------------------------------------------------------- "Winning isn't a matter of life and death. Its far more important than that"
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
