On Sun, 2004-12-12 at 15:14 -0600, Burton Strauss wrote: > You can't really do it. ntop sees packets (which have source and > destination in them) and monitors from that. > > You can put multiple NICs into the ntop monitoring box and disable the > interface merging - that gives you the view of, for example, LAN and WAN > traffic. But not to/from. >
I am really interested in having that. The box that runs ntop is my traffic distributor with 6 NICs in it. So, from this network point this kind of info is really important. If I am going to add this kind of support to ntop, where is the best place to do it? As a plugin or direct into the main code? (I have not looked at the source code yet) The plugin seems to be the best place to add it, if it has all necessary "handlers" for it. OTOH, adding it as a plugin might duplicate (or triplicate) the info already in the main code. Thanks for your help, Raul Dias > -----Burton > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Raul > Dias > Sent: Sunday, December 12, 2004 1:35 PM > To: [EMAIL PROTECTED] > Subject: Separation of traffic direction. WAS: RE: [Ntop] > --flow-specspecification > > Got it now. > > So, what is the best way to have traffic information separated by direction? > > E.g. Traffic going and traffic comming for a network interface, gateway, > host and/or service. > > Right now, AFAICT, ntop summarises both traffic directions together without > being able to split the data regarding the direction. > > Raul Dias > > On Sun, 2004-12-12 at 09:52 -0600, Burton Strauss wrote: > > The examples in the man page, right below, show sample expressions - > > it's just a standard bpf expression... > > > > It's useless - it is NOT an ntop filter, it just defines a counter of > > packets matching a bpf expression. So it's useless because all it > > does is put a count on one page. > > > > -----Burton > > > > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop -- Raul Dias <[EMAIL PROTECTED]> _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
