Hi, (Short version of this message for those in a hurry: Is there a way to bring back the "Remaining Host(s)" mention, as in version 2.1.50, so that sessions are shown even with the "--track-local-hosts" option?
For details, read on...) I have been running ntop for a few years and I appreciate it a lot. I ran version 2.1.50 for a long time (on a RedHat box), and after experiencing a few freezes I upgraded to 2.1.57. Something seems to have changed in the way sessions are tracked from 2.1.50 to 2.1.57, and the behavior of the latest version (2.2.94 from this morning's CVS) is the same in that regard. The traffic I'm monitoring is a mirror of our university's Internet link, so I have to use the "--no-mac" (don't trust MAC addresses) option. With version 2.1.50 on RedHad 7.3, if I use the "--track-local-hosts" (track local hosts only) option, sessions are tracked with all external hosts listed as "Remaining Host(s):<port>". Even if the IP address of the remote host is not shown, all the sessions are there, with the local IP address/port and the remote port. This is very useful. With versions 2.1.57 on RedHad 7.3 and version 2.2.94 on RedHad 9, if I use the "--no-mac" and "--track-local-hosts" options, no sessions are tracked. The "IP Protos" -> "Sessions" page says "No active TCP sessions". If I don't use the "--track-local-hosts" option, sessions do appear but with an average of around 40 Mb/s of traffic, I used up all the memory on the machine (Xeon 2.4 GHz with 1.5 gigs of memory) and ntop slowed down to a crawl after running for only 10 minutes. With this traffic, It doesn't seem that I can run without the "--track-local-hosts" option. So, like I said at the beginning of this message, is there a way to bring back the "Remaining Host(s)" mention, as in version 2.1.50, so that sessions are shown even with the "--track-local-hosts" option? Thank you very much for your help, and keep up the good work! Regards, Marc. -- Marc Mazuhelli Computer security analyst Service des technologies de l'information Universit� de Sherbrooke Sherbrooke, Quebec, Canada _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
