Hi list
I use Ntop to monitor Internet traffic at a gateway site. It's installed on a separate machine in front of the firewall so to speak. The interface it listens on is "stealth", meaning it has no IP attached to it.
Problem: As soon as I use the -m option Ntop seems to confuse IP addresses of hosts, assigning traffic definitely going to one machine to the listing of another. Also I get the same IP address with two different MACs. Omitting the -m solves all this but leaves me with not so detailed stats and no TCP sessions.
Usage: -m 19x.1xx.68.0/24,19x.1xx.69.0/24
Most local hosts are in the .68 subnet and it's with them the confusion occurs.
Any ideas what could cause this appreciated.
Regards Ralf G.
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
