Read docs/FAQ and man ntop on the -o | --no-mac option. -----Burton
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Ralf Guenthner > Sent: Thursday, July 15, 2004 7:29 AM > To: [EMAIL PROTECTED] > Subject: [Ntop] Strange effects with -m switch > > > Hi list > > I use Ntop to monitor Internet traffic at a gateway site. It's installed > on a separate machine in front of the firewall so to speak. The > interface it listens on is "stealth", meaning it has no IP attached to it. > > Problem: As soon as I use the -m option Ntop seems to confuse IP > addresses of hosts, assigning traffic definitely going to one machine to > the listing of another. Also I get the same IP address with two > different MACs. Omitting the -m solves all this but leaves me with not > so detailed stats and no TCP sessions. > > Usage: -m 19x.1xx.68.0/24,19x.1xx.69.0/24 > > Most local hosts are in the .68 subnet and it's with them the confusion > occurs. > > Any ideas what could cause this appreciated. > > Regards > Ralf G. > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
