Thanks for the reply. The router is doing proxy arp this might cause the confusion right? --no-mac would remedy this? Of course i realise no info about the network access layer is being collected then, but i dont mind, i just wish info about the ip's and the amount of traffic they're sending and what kind of traffic. Bye,
Mipam. On Thu, 30 Sep 2004, Burton M. Strauss III wrote: > Sounds like mac address confusion. Read man ntop and docs/FAQ on --no-mac > switch. > > -----Burton > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > > Mipam > > Sent: Thursday, September 30, 2004 10:36 AM > > To: [EMAIL PROTECTED] > > Subject: [Ntop] weird display results > > > > > > Hi, > > > > I am using ntop 3.0 on freebsd. > > I am starting it like ntop -i xl0 -n -w 192.168.2.103:3000 -W 0 -L > > --set-pcap-nonblocking > > > > 192.168.2.103 is configured on xl1 (so ntop is listening on xl1 on port > > 3000) and is sniffing on xl0. > > xl0 is connected to a switch port which monitors the port on which the > > router is connected, so all traffic that goes through the router > > is echo'd > > to the port xl0 is listening on. > > > > Now When i visit with my browser the ntop page and go to All Protocols > > and then to Traffic i see a list of IP's. > > The first ip sents and receive's the most traffic. > > In my case i see 172.31.208.33 on top as the host which is > > generating/receiving most traffic, about 49.3% off all traffic. > > when i click in this IP i get another screen with Info about 172.31.208.33 > > However, the first line in the table says: 172.31.21.250 > > (unicast-multihomed). However, this is the IP of the router..... > > What is going on? I though i would see information about 172.31.208.33 > > But is information now displayed from 172.31.21.250? > > How does ntop show its info i am very much confused. > > Bye, > > > > Mipam. > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
