Yes, this is helpful, thanks.

> Command line:
> usr/local/bin/ntop -d -L -u ntop -w 3000 -p /etc/ntop/protocol.list -P
> /var/lib/ntop -a /var/lib/ntop/access.log -i eth0 -t 0 -O
/var/log/ntop/ -z
> --ignore-sigpipe -g -n -o -r 300 -m x.y.z.a/22,b.c.d.e/16 -C -M -e 40
>
>
> Protocol list was long and might be useful to some people. Not perfect but
a
> good indiator.
>
>
FTP=ftp|ftp-data,HTTP=http|www|https,8080=8080,DNS=name|domain,Telnet=telnet
>
|login,MailClient=pop-2|pop-3|pop3|kpop|imap|imap2|imaps,SMTP=smtp,SNMP=snmp
>
|snmp-trap,NEWS=nntp,NFS=mount|pcnfs|bwnfs|nfs|nfsd-status,X11=6000-6010,SSH
>
=ssh,RTSP=554,Edonk=4661-4668,BitTorrSeed=6969,Bittor=6881-6999,Fasttrack=12
>
14,Gnutel=6345-6349,WinMX=6699,WindowsNet=135|137|139|445,BackOrifice=31337,
>
MSSQL=1433,SQLSlammer=1434,MyDoom=3127,Trinoo=27444,Dameware=6129,Blackjack=
>
1025,BackDoorsetup=5000,isakmp=500,halflife=27015,Subseven=27374,dditcp1=888
> 8,Crackdown=4444,RDP=3389

_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to