flows ?? do you mean netflows??? The input file is in tcpdump format... -----Burton
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Marco Decker Sent: Tuesday, November 25, 2003 9:01 AM To: [EMAIL PROTECTED] Subject: [Ntop] ntop with -f option and pcap-file hello, i have some problems with using the -f option starting ntop. i understand the option that i start ntop and ntop captures the flows i captured in the pcap-file. i am sure that the pcap-file is not empty, but why didn�t i see something in display. Thanks for your help marco machine:/home/nnm_adm # ntop -u user -f ./flow.pcap Wait please: ntop is coming up... 25/Nov/2003 15:43:47 ntop v.2.2c MT (SSL) [i686-suse-linux] (09/23/03 09:00:49 P M build) 25/Nov/2003 15:43:47 Copyright 1998-2003 by Luca Deri <[EMAIL PROTECTED]> 25/Nov/2003 15:43:47 Get the freshest ntop from http://www.ntop.org/ 25/Nov/2003 15:43:47 Initializing ntop 25/Nov/2003 15:43:47 SSL is present but https is disabled: use -W <https port> f or enabling it 25/Nov/2003 15:43:47 Initializing gdbm databases 25/Nov/2003 15:43:47 Listening on [pcap file] 25/Nov/2003 15:43:47 Loading Plugins 25/Nov/2003 15:43:47 Searching for plugins in /usr/lib/ntop/plugins 25/Nov/2003 15:43:47 NETFLOW: Welcome to NetFlow.(C) 2002 by Luca Deri 25/Nov/2003 15:43:47 RRD: Welcome to rrdPlugin. (C) 2002 by Luca Deri. 25/Nov/2003 15:43:47 LASTSEEN: Welcome to LastSeenWatchPlugin. (C) 1999 by Andre a Marangoni 25/Nov/2003 15:43:47 NFS: Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri 25/Nov/2003 15:43:47 SFLOW: Welcome to sFlowPlugin. (C) 2002 by Luca Deri 25/Nov/2003 15:43:47 PDA: Welcome to PDAPlugin. (C) 2001-2002 by L.Deri and W.Br ock 25/Nov/2003 15:43:47 ICMP: Welcome to icmpWatchPlugin. (C) 1999 by Luca Deri 25/Nov/2003 15:43:47 Plugins loaded... continuing with initialization 25/Nov/2003 15:43:47 Resetting traffic statistics... 25/Nov/2003 15:43:47 VENDOR: Loading MAC address table. 25/Nov/2003 15:43:47 VENDOR: Checking './specialMAC.txt' 25/Nov/2003 15:43:47 VENDOR: Checking '/etc/ntop/specialMAC.txt' 25/Nov/2003 15:43:47 VENDOR: ...found, 61 lines, loaded 59 records! 25/Nov/2003 15:43:47 VENDOR: Checking './oui.txt' 25/Nov/2003 15:43:47 VENDOR: Checking '/etc/ntop/oui.txt' 25/Nov/2003 15:43:47 VENDOR: ...found, 70 lines, loaded 62 records! 25/Nov/2003 15:43:47 I18N: Default language (from ntop host) is 'de_DE' 25/Nov/2003 15:43:47 I18N: This instance of ntop supports 0 additional language( s) 25/Nov/2003 15:43:47 IP2CC: Looking for IP address <-> Country code mapping file 25/Nov/2003 15:43:47 IP2CC: 47455 records read 25/Nov/2003 15:43:48 NOTE: atfork() handler registered for mutexes, rc 0 25/Nov/2003 15:43:48 THREADMGMT: Packet processor thread (0) started... 25/Nov/2003 15:43:48 THREADMGMT: Started thread (16386) for network packet analy ser 25/Nov/2003 15:43:48 THREADMGMT: Address resolution thread started... 25/Nov/2003 15:43:48 THREADMGMT: Started thread (32771) for DNS address resoluti on 25/Nov/2003 15:43:48 Calling plugin start functions (if any) 25/Nov/2003 15:43:48 RRD: Welcome to the RRD plugin 25/Nov/2003 15:43:48 THREADMGMT: rrd thread (0) started 25/Nov/2003 15:43:48 RRD: Started thread (49156) for data collection. 25/Nov/2003 15:43:48 NETFLOW: White list initialized to '' 25/Nov/2003 15:43:48 NETFLOW: Black list initialized to '' 25/Nov/2003 15:43:48 NETFLOW: Collector listening on port 2055 25/Nov/2003 15:43:48 NETFLOW: Export disabled at user request 25/Nov/2003 15:43:48 THREADMGMT: netFlow thread(0) started 25/Nov/2003 15:43:48 WEB: Initializing 25/Nov/2003 15:43:48 Note: Reporting device set to 0[eth0] 25/Nov/2003 15:43:48 WEB: Waiting for HTTP connections on port 3000 25/Nov/2003 15:43:48 THREADMGMT: web connections thread (1305) started... 25/Nov/2003 15:43:48 THREADMGMT: Started thread (81926) for web server 25/Nov/2003 15:43:48 Sniffying... 25/Nov/2003 15:43:48 THREADMGMT: pcap dispatch thread started... 25/Nov/2003 15:43:48 THREADMGMT: Started thread (98311) for network packet sniff ing on pcap-file 25/Nov/2003 15:43:48 pcap_dispatch returned 0 [No more packets to read] 25/Nov/2003 15:43:48 THREADMGMT: pcap dispatch thread terminated... -rwxr-x--- 1 user ivn 4081568 2003-11-25 15:32 flow.pcap -- NEU F�R ALLE - GMX MediaCenter - f�r Fotos, Musik, Dateien... Fotoalbum, File Sharing, MMS, Multimedia-Gru�, GMX FotoService Jetzt kostenlos anmelden unter http://www.gmx.net +++ GMX - die erste Adresse f�r Mail, Message, More! +++ _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
