Make sure you're not showing ntop the same traffic twice - either on different interfaces or on a single interface via VLANs.
-----Burton > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Peter DeVries > Sent: Tuesday, August 31, 2004 9:31 PM > To: ntop mailing list > Subject: [Ntop] Duplicate entries in wget output > > > When I pull data from ntop using: > > wget -O 20040831-2146 > http://192.168.90.8:3000/dumpData.html?language=perl&view=long > > I get duplicate entries such as > > '192.168.90.38' => { > 'index' => '0', > 'hostNumIpAddress' => '192.168.90.38', > 'hostResolvedName' => '192.168.90.38', > 'firstSeen' => '1039885149', > 'lastSeen' => '1040130357', > 'minTTL' => '0', > 'maxTTL' => '0', > 'pktSent' => '2319', > 'pktRcvd' => '2713', > <snip> > 'Messenger' => { > 'sentLoc' => '0', > 'sentRem' => '0', > 'rcvdLoc' => '0', > 'rcvdFromRem' => '0' > }, > }, > 'ethAddressString' => '00:D0:59:CD:24:85' > }, > > and > > '192.168.90.38' => { > 'index' => '0', > 'hostNumIpAddress' => '192.168.90.38', > 'hostResolvedName' => '192.168.90.38', > 'firstSeen' => '1039885126', > 'lastSeen' => '1040130375', > 'minTTL' => '64', > 'maxTTL' => '64', > 'pktSent' => '222097', > 'pktRcvd' => '374984', > <snip> 'Messenger' => { > 'sentLoc' => '0', > 'sentRem' => '244861', > 'rcvdLoc' => '0', > 'rcvdFromRem' => '333460' > }, > }, > 'ICMP' => { > 'SENT_ECHO' => '0', > 'SENT_ECHOREPLY' => '0', > 'SENT_UNREACH' => '41', > 'SENT_ROUTERADVERT' => '0', > 'SENT_TMXCEED' => '0', > 'SENT_PARAMPROB' => '0', > 'SENT_MASKREPLY' => '0', > 'SENT_MASKREQ' => '0', > 'SENT_INFO_REQUEST' => '0', > 'SENT_INFO_REPLY' => '0', > 'SENT_TIMESTAMP' => '0', > 'SENT_TIMESTAMPREPLY' => '0', > 'SENT_SOURCE_QUENCH' => '0', > 'RCVD_ECHO' => '0', > 'RCVD_ECHOREPLY' => '0', > 'RCVD_UNREACH' => '0', > 'RCVD_ROUTERADVERT' => '0', > 'RCVD_TMXCEED' => '0', > 'RCVD_PARAMPROB' => '0', > 'RCVD_MASKREPLY' => '0', > 'RCVD_MASKREQ' => '0', > 'RCVD_INFO_REQUEST' => '0', > 'RCVD_INFO_REPLY' => '0', > 'RCVD_TIMESTAMP' => '0', > 'RCVD_TIMESTAMPREPLY' => '0', > 'RCVD_SOURCE_QUENCH' => '0', > }, > 'securityPkts' => { > 'synPktsSent' => '0', > 'synPktsRcvd' => '0', > 'rstPktsSent' => '0', > 'rstPktsRcvd' => '0', > 'rstAckPktsSent' => '0', > 'rstAckPktsRcvd' => '0', > 'synFinPktsSent' => '0', > 'synFinPktsRcvd' => '0', > 'finPushUrgPktsSent' => '0', > 'finPushUrgPktsRcvd' => '0', > 'nullPktsSent' => '0', > 'nullPktsRcvd' => '0', > 'ackXmasFinSynNullScanSent' => '0', > 'ackXmasFinSynNullScanRcvd' => '0', > 'rejectedTCPConnSent' => '0', > 'rejectedTCPConnRcvd' => '0', > 'establishedTCPConnSent' => '0', > 'establishedTCPConnRcvd' => '0', > 'terminatedTCPConnServer' => '0', > 'terminatedTCPConnClient' => '0', > 'udpToClosedPortSent' => '0', > 'udpToClosedPortRcvd' => '41', > 'udpToDiagnosticPortSent' => '0', > 'udpToDiagnosticPortRcvd' => '0', > 'tcpToDiagnosticPortSent' => '0', > 'tcpToDiagnosticPortRcvd' => '0', > 'tinyFragmentSent' => '0', > 'tinyFragmentRcvd' => '0', > 'icmpFragmentSent' => '0', > 'icmpFragmentRcvd' => '0', > 'overlappingFragmentSent' => '0', > 'overlappingFragmentRcvd' => '0', > 'closedEmptyTCPConnSent' => '0', > 'closedEmptyTCPConnRcvd' => '0', > 'icmpPortUnreachSent' => '41', > 'icmpPortUnreachRcvd' => '0', > 'icmpHostNetUnreachSent' => '0', > 'icmpHostNetUnreachRcvd' => '0', > 'icmpProtocolUnreachSent' => '0', > 'icmpProtocolUnreachRcvd' => '0', > 'icmpAdminProhibitedSent' => '0', > 'icmpAdminProhibitedRcvd' => '0', > 'malformedPktsSent' => '0', > 'malformedPktsRcvd' => '0', > }, > }, > > Obviously the records are drastically different, any ideas why or how > I can avoid these? > > Thanks, > Peter > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
