Hi all, my network is connected to another network with a gateway which is doing port address translation (PAT). In each network there is one or more SMTP servers as follows:
Remote Network (R) ------------------ SMTP server 192.168.1.1 on port 25 Local Network (L) ----------------- SMTP server 192.168.0.1 on port 25 SMTP server 192.168.0.1 on port 8025 Gateway ------- - All packets from network R directed to 192.168.0.1 TCP 25 are translated to 192.168.0.1 TCP 8025 - All packets from L directed to R are routed ntop 3.0 is running on a machine in the same network segment as the gateway and R (I can change this if it is required to solve my problem). Now, the question. Is it possible to use ntop to get following data SEPARATELY (i.e. in distinct rrd files)? 1 - Traffic originated by L directed to R on TCP destination port 25 2 - Traffic originated by R directed to L as response to traffic generated above (1) 3 - Traffic originated by R directed to L on destination port 25 (packets are translated by the gateway) 4 - Traffic originated by L directed to R as response to traffic generated above (3) I've tried with several -B configurations (by using a MAC address filter) but I'm not getting expected results. I'm now thinking about using several ntop processes running concurrently with different configuration filters but I don't know if it is a good way to accomplish this job and if this configuration will work. Has anyone solved this problem before? Thanks, Marco _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
