An alternative to that is to use Cisco's NetFlow to report data to an NTop collector. This way, you don't need to use port mirroring. You can see a paper I wrote on this at http://prdownloads.sourceforge.net/ntop/ntop-netflow-cisco.pdf?download. Let me know if that helps or harms. :-)
--Jonathan > -----Original Message----- > From: Crowe, Tom [mailto:[EMAIL PROTECTED] > Sent: Tuesday, April 20, 2004 8:51 AM > To: [EMAIL PROTECTED] > Subject: RE: [Ntop] Ntop and the Cisco Catalyst 2950 switches > > > > Gerhard, > > Attached is a PDF off Cisco's website about configuring the 2950 with a > SPAN port. You have to configure a port on the switch where all traffic > on the switch will be mirrored to the SPAN port. It's very simple to > configure and you don't have to do anything special for ntop. > > I have a similar setup using fBSD 4.9 and ntop 3 monitoring a 2950 and > another box monitoring a 3500. > > -Tom > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Tuesday, April 20, 2004 12:43 AM > To: [EMAIL PROTECTED] > Subject: [Ntop] Ntop and the Cisco Catalyst 2950 switches > > Hello list, > > I'm presently trying to install and run Ntop version 3.0 on a large > network where the Cisco Catalyst 2950 switches is used to connect > systems together. Ntop install correctly but cannot see all trafic on > the network. > I just get small amount of information (>= 400kb) and nothing else on > every monitored servers. Even if a try to transfert large amount of data > (50MB or less) nothing are displayed into the reported page. Does > somebody on this list have an idea about the problem? I'm pretty sure > that someone know what the problem is because cisco switches are often > used onto entreprises. > > 1- Does I've to use the Netflow/sflow feature of ntop with the Cisco > Catalyst 2950 switches to make it work? > > 2- Does using eth0 is enought to make it work with the Cisco Catalyst > 2950 switches? > > 3- Does I've to enable/configure something into the Cisco Catalyst 2950 > switches to make it work? > > Any comments are welcome and I thank you for your answer. > > Gerhard, > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > ------------------------------------------------------------------------ -- > ------ > This e-mail may contain privileged or confidential information. If the e- > mail was not intended for you, please (i) delete the e-mail and any > attachments; (ii) destroy any copies that may have been made; (iii) do not > use, copy, or distribute the contents in any form; and (iv) notify the > sender by return e-mail or by calling (864) 242-8200. No privilege is > waived by inadvertent transmission. > > Thank you. > ------------------------------------------------------------------------ -- > ------ _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
