Hi. I get charged on incoming trafic basic by my ISP. I didn't have any problem for the last year and a half. Unfortunately I received a HUGE bill last month!
So I searched the internet for tools that can peroduce some monitoring reports. I found that ntop should meet my needs. I checkout the HEAD version, compiled it and start it with following switches: ---- ntop -d -L -i "eth1,eth1:1" -j -q -r 180 -u ntop -w 127.0.0.1:81 --w3c -c -g -m "42.53.12.3/32,42.53.12.4/32" -p /etc/ntop/protocol.list ---- After few hours I checked the web page ... I found some 'strange' trafix. I guess that I don't know how to interpret the results. Can someone please help me figure out what (which IP and what service) is generating all my incomming trafix. My configuration: My machine is connected to the ISP net using 'eth1'. They gived me two IPs: - 42.53.12.3 - 42.53.12.4 Those IPs are part of their local subnet 42.53.12.0/24 . I'm using eth1:1 alias for the second IP. Please help ... I don't want to receive another such a bill for Xmas :( Best regards, Dezo _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
