Nope. READ docs/FAQ - there's a discussion on the hybrid layer 2 / layer 3 nature of ntop.
The data you're looking for doesn't exist. A lot of the traffic - all the local stuff - will be routed by MAC address, not IP over the last hop - read your TCP/IP and Ethernet standards. There's no good way to pick it part. -o | --no-mac does partially, but you then lose all of the MAC level traffic (ARP, NetBIOS, etc.) which can be a big % of the total (or not). Now you could run multiple instances, using the -B "ip and host x.y.z.z" filters plus the -o | --no-mac option, but you'll lose a lot of the benefits of the hybrid analysis. OTOP, that may be enough for you. Give it a try... -----Burton > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Glenn > Kusardi > Sent: Sunday, February 01, 2004 10:31 AM > To: [EMAIL PROTECTED] > Subject: [Ntop] Multiple IPs on one interface > > > Hello, > > I have ntop properly setup and everything is running smoothly. First > of all, great software. I'm still surprised about the reports made by > ntop. > > The server got an interface eth0, configured with some virtual > interfaces eth0:1, eth0:2,... for configuring multiple IP addresses on > one network-interface. > > Is it possible to get ntop splitting traffic information for eth0 by > IP addresses? > > Something like: > > Network Interface eth0 > Address 192.168.0.1 Traffic Sent: 23,42 MB > Traffic Rcvd: 23,42 MB > Address 192.168.0.2 Traffic Sent: 42,23 MB > Traffic Rcvd: 42,23 MB > ... > > TIA, > Glenn Kusardi > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
