Well, the doggy ones are:
-C | --large-network
This flag is a hint for ntop : as the network being analyzed will
be
large, ntop will build a more efficient hash and save memory by
dis-
abling some features (e.g traffic distribution during the day)
that
take up a large amount of memory.
The few things this disables are:
if(!myGlobals.largeNetwork) {
if(srcHost->trafficDistribution == NULL) srcHost->trafficDistribution =
calloc(1, sizeof(TrafficDistribution));
if(dstHost->trafficDistribution == NULL) dstHost->trafficDistribution =
calloc(1, sizeof(TrafficDistribution));
incrementTrafficCounter(&srcHost->trafficDistribution->last24HoursBytesSent[
hourId], length.value);
incrementTrafficCounter(&dstHost->trafficDistribution->last24HoursBytesRcvd[
hourId], length.value);
}
that is the traffic distribution reports...
if(!myGlobals.largeNetwork)
el->portsUsage = (PortUsage**)calloc(sizeof(PortUsage*),
MAX_ASSIGNED_IP_PORTS);
that is the port usage reports...
and the fork()ing of child processes for reporting against static data.
This last 1) means that a crash in the web server takes out ntop and 2)
might lead to various problems if the protective mutexes are missing or
aren't exactly right.
and
-g | --track-local-hosts
Use this flag to tell ntop that you do care only about local
hosts
(use -m to specify local nets). This flag is useful on large
networks
or those that see many hosts, (e.g. a border router or gateway),
yet
only the local ones need to be tracked.
That one will cause any host not local to you (-m or from the addresses of
the interfaces) to be dumped into the 'other' bucket, which isn't reported
from.
Neither will automatically disable those features, but there's are reports
of strange behavior under Solaris 8 and 9...
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Paul
Matthews
Sent: Monday, June 23, 2003 9:56 AM
To: Ntop Mailing List
Subject: [Ntop] Capturing Multicast Traffic.
Hi - We are running ntop 2.2 on Solaris 8. Everything seems to be OK.
There are a few things it won't 'capture'.
Statistics ->
Multicast -> No Data To Display (yet)
IP Protocols ->
Usage -> No Data To Display (yet)
Would any of the flags that I start it with stop it from doing the above ?
/usr/local/bin/ntop -o -g -u root -C -D swan.ac.uk
-p /usr/local/etc/protocol.list -P /usr/local/var/ntop
-r 120 -n -d -m "137.44.0.0/16" -i ge1,ge2
Cheers,
Paul.
--------------------------------------------------------------------------
Paul Matthews Head of Networking/Postmaster
Library and Information Services,
University of Wales Swansea , Singleton Park, Swansea SA2 8PP, UK
email: [EMAIL PROTECTED] [EMAIL PROTECTED]
tel: +44 (0)1792 295107 mobile: 07802166089 fax: +44 (0)1792 295851
--------------------------------------------------------------------------
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
