You can't really do it. ntop sees packets (which have source and destination in them) and monitors from that.
You can put multiple NICs into the ntop monitoring box and disable the interface merging - that gives you the view of, for example, LAN and WAN traffic. But not to/from. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Raul Dias Sent: Sunday, December 12, 2004 1:35 PM To: [EMAIL PROTECTED] Subject: Separation of traffic direction. WAS: RE: [Ntop] --flow-specspecification Got it now. So, what is the best way to have traffic information separated by direction? E.g. Traffic going and traffic comming for a network interface, gateway, host and/or service. Right now, AFAICT, ntop summarises both traffic directions together without being able to split the data regarding the direction. Raul Dias On Sun, 2004-12-12 at 09:52 -0600, Burton Strauss wrote: > The examples in the man page, right below, show sample expressions - > it's just a standard bpf expression... > > It's useless - it is NOT an ntop filter, it just defines a counter of > packets matching a bpf expression. So it's useless because all it > does is put a count on one page. > > -----Burton > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
