There is no way to resolve a MAC address to a specific IP. There are lots of manual ways to map some MAC addresses to IPs, but they're manual, incomplete and often us outdated information. There is no automatic way to resolve them all.
We often think of "Ethernet" and "tcp/ip" as being the same, but they're not by any stretch. You should do some research as to the difference between the wireline protocols such as Ethernet and the higher level protocols such as tcp/ip. It's an eye-opener. There are even entire networks that don't use IP, but do use Ethernet. But that's not your problem... The real question is why ntop is seeing the packets only as MAC layer (that is Ethernet) not tcp/ip. It sounds like your un-numbered interface is reporting itself to have an encapsulation that ntop doesn't recognize. Use -t 5 to see the startup messages as ntop grabs the interface. (grep in the code for the DLT_ stuff if you want to look further). Even though it's unnumbered, you have to 'plumb' it (to use the Solaris term) just like a real interface, so that it will tell the OS it is one. Maybe try configuring it with the ip address 0.0.0.0? That (at least under Linux) forces all of the tcp/ip stuff on... -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Andrea Seves Sent: Monday, July 21, 2003 9:58 AM To: [EMAIL PROTECTED] Subject: [Ntop] MAC address NOT ip... Hi, i've compiled NTOP 2.2 on a FreeBSD 4.8 with two network cards. My goal was to use one card in stealth mode (promiscuos) and the other to reach the server. When I launch NTOP everything seems to work fine but when I browse the protocol statistic I see only Vendor:mac_address_octets instead of IP (where resolvable) and NTOP don't collect TCP/UDP statistics. Note that when I start NTOP on the other interface the TCP stats works well. I'm using a cisco 2950T configured in SPAN mode (monitor source / destination, etc etc). Do yoo know how to tell ntop to resolve MAC to IP addresses? Bye. Andrea Seves _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
