--filter-expression "host 192.168.19.5"

DO NOT FORGET THE "s - otherwise, strange, non-obvious and not-wonderful
things may happen... 

-----Burton

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Wednesday, January 12, 2005 1:32 PM
To: Aldo Werner
Cc: [email protected]
Subject: [Ntop] Re: Re: How to config Ntop to see host on any net ??????


For instance, on your ntop command line, I would add the filter you want to
use.  If you  wanted to see traffic from only 192.168.19.5 your filter might
look like this:

--filter-expression host 192.168.19.5.

You would add it to your /etc/ntop.conf, that is assuming that your Mandrake
install uses the same files and configs.  In my /etc/ntop.conf the section
you care about starts near line 260, depending on how your file is set up.

If you are making regular changes to your filters, I recommend using the
user interface and go to the "Change Filter" section under the Admin link.
"changeFilter.html".  Use the same syntax found in man page for "tcpdump".


<snip />


_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to