hi wrong entries here too!
my startup: /usr/local/bin/ntop -u ##### -i eth0 -w3000 --sticky-hosts --mapper --enable-external-tools --domain ##### -p /usr/local/etc/ntop.proto.all -P /usr/local/ntop/var -----Urspr�ngliche Nachricht----- Von: Fischman, Reuben [mailto:[EMAIL PROTECTED] Gesendet: Friday, December 19, 2003 5:43 PM An: '[EMAIL PROTECTED]' Betreff: [Ntop] Misidentified ip addresses In my list of hosts and who they're communicating with, I have several entries for the same host. For example: I0.0 bps 0.0 bps 0.0 bps 0.0 Pkts/sec 0.0 Pkts/sec 0.0 Pkts/sec 172.16.137.50 </172.16.145.254.html> 0.0 bps 0.0 bps 0.0 bps 0.0 Pkts/sec 0.0 Pkts/sec 0.0 Pkts/sec 172.16.137.50 </172.16.146.254.html> 0.0 bps 0.0 bps 0.0 bps 0.0 Pkts/sec 0.0 Pkts/sec 0.0 Pkts/sec 172.16.137.50 </172.16.136.151.html> 0.0 bps 0.0 bps 0.0 bps 0.0 Pkts/sec 0.0 Pkts/sec 0.1 Pkts/sec 172.16.137.50 </172.16.136.240.html> As can be seen from the snapshot above, the URLs actually point to hosts other than what the display shows. It gets even more bizarre when I click on one of those hosts: Info about 172.16.137.50 <http://172.16.137.50/> IP Address 172.16.145.254 [unicast] It displays a different IP Address than what the "info about" title displays. This running off a netflow collector. This problem also extends to trying to open up the RRD graphs, and causes URL security to take effect. What might I have configured incorrectly here? Below is a copy of the startup command that was used (based on settings in the ntop.conf file and how it parsed out) /usr/bin/ntop -i none --user #### --daemon --db-file-path /usr/local/share/ntop --domain ##########-i none -M -m 172.16.0.0/16 --trace-level 3 --use-syslog=local3 --http-server 3000 --disable-schedyield -d Thanks in advance Reuben _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
