Hi, > NTOPsters, > > I joined today .... under pressure. > <snip> > > My boss is also convinced that all switches (yeah ...) have the > feature where all traffic occuring via that switch will be visible to > all ports on the switch, and, since NTOP is plugged into a switch (a > 3Com 3300TM), all traffic on that switch should be reported by NTOP. > He uses the word "backplane" a lot.
The "feature" your boss describe is what a hub does, as you correctly note below. <snip> > > Both machines are plugged into the same 3Com switch. > > NetProbe sees much more traffic/activity. Try switching the port of the ntop box with the Netprobe box. > > Question 1: Is it true that NTOP must be plugged into a hub to see > "all" network traffic? Nope, if your switch is capable of "mirroring" or in 3COMese "Roving analysis port", I think. You'll need to configure the switch to mirror data from a specified port/vlan to the port that ntop is on. Unfortunately, on the switches that I've seen, you can only mirror data to one port. So, if you want to use both ntop and netprobe, you'll need to mirror data to one port, plug a hub into that port, then plug your boxes into that port. > > Question 2: Does anyone else think of switches like my boss does? Not if they know the difference between a switch and hub. ;) > Question 3: Anyone willing to comment as to why NetProbe sees much > more than NTOP on our 3Com switch? Maybe the switch is already configured to mirror to the port the Netprobe box is on... Erik _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
