*********************** No virus found in attachment no filename No virus found in attachment no filename
Your mail has been scanned by InterScan for SMTP. ***********-*********** What about ARP spoofing ? This rings a bell to me, has anyone tried using this method ? Rdgs Nic > ----- Message from Joe Carder <[EMAIL PROTECTED]> on Wed, 13 Oct > 2004 09:29:53 -0500 -----> > To:> > "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>> > Subject:> > RE: [Ntop] Question (probably dumb) from a new user> > Before buying a hub though, I would check and see if the switch you are > using will support port mirroring. The majority of enterprise level managed > switches will. > > > > _____ > > From: Nick Weaver [mailto:[EMAIL PROTECTED] On Behalf Of Nick Weaver > Sent: Wednesday, October 13, 2004 9:23 AM > To: [EMAIL PROTECTED] > Subject: RE: [Ntop] Question (probably dumb) from a new user > > > > You probably have NTOP on a switched network, and are missing some of the > traffic. The way I get around this is to place a hub between the > backbone/regular network, with NTOP listening there. > > > > Switched network --->Hub w/NTOP box ---> Backbone/server switches > > > > or I also do it this way > > > > Switched network --> Hub w/NTOP --> Router -->Remote Router ---> Hub w/NTOP > --> Remote switched network > > > > > > I am sure that email will mangle my beautiful diagrams...oh well. You should > be able to get the idea. You can also use port mirroring. I have these hubs > placed like this for sniffing/analysis anyway (but this is a test lab, not a > production environment) > > > > > > Nick Weaver > Test Lead/IT Support > KeyLabs(tm) > BottomLine Quality Managment > Building 7 System Test Lab > Ph: 208-396-7386 > Cell: 208-353-5443 > > > > _____ > > From: [EMAIL PROTECTED] on behalf of Tim Holmes > Sent: Wed 10/13/2004 7:59 AM > To: [EMAIL PROTECTED] > Subject: [Ntop] Question (probably dumb) from a new user > > > > Good morning. I just started using NTOP to monitor my network this week, > and so far its going well, but I have a question. > > According to my summary screen, NTop has been running for 1 day and 20 hours > and change. So it is showing total packets processed at just over 207,000 > I know that's a large number, but it doesn't seem like enough for what Ive > been doing on the network. We have about 100 regular users who are logging > in etc, as well as I did 2 ghost casts yesterday, (each one over 5 gigs). > Does NTOP only sample every so often, or is my traffic really that low? Or > am I totally messed up? > > Thanks > > TIM > > Tim?Holmes > ? > IT Manager > Medina Christian Academy, Inc. > A Higher Standard... > ? > Jeremiah 33:3 > Jeremiah 29:11 > Esther 4:14 > > > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > <http://listgateway.unipi.it/mailman/listinfo/ntop> > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > > ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > Disclaimer and Confidentiality Note > > Please click on the link below: > http://www.rohlig.co.za/RohligNew/uploads/declaration.html > http://www.pca.co.za/dis.htm > http://www.kapele.co.za/KapeleNew/uploads/declaration.html
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
