The two are not related...
The "Local Host" graphic indicates a host in the RFC1918 ranges
(192.168.0.0/16, 172.16.0.0/16 and 10.0.0.0/8) and 127.0.0.0/8 - per the p2c
file.
-m defines hosts that are treated as local. This can be ANY range, not just
RFC1918.
BUT: there are other tests before loading the flag value... The important
one is this:
if((el->hostResolvedNameType != FLAG_HOST_SYM_ADDR_TYPE_NAME) ||
(el->hostResolvedName == NULL) ||
(el->hostResolvedName[0] == '\0')) {
/* Do NOT set FLAG_THE_DOMAIN_HAS_BEEN_COMPUTED - we still might learn
the DNS Name later */
releaseAddrResMutex();
return;
}
What this means is that if ntop hasn't given up resolving the address, it
won't set a code.
Turn on -K (debug) and you'll see additional information in the host link
area, e.g.:
192.168.42.20 (vlan 3) [IP]
If it has one of the tags (e.g. IP means it's an IP address, not resolved to
a name (yet)). If it's not a resolved address ntop may not have given up
and so the test above will fail to allocate a 'flag'.
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Laura Donovan
Sent: Sunday, March 13, 2005 2:03 PM
To: [email protected]
Subject: [Ntop] Local networks not showing as Home Domain
Hello,
I'm running Ntop v.3.1 MT (SSL) with the NetFlow plugin using the following
startup options:
--daemon
--http-server 3000
--interface eth0
--no-promiscuous
--no-mac
--local-subnets 10.10.0.0/16,10.20.0.0/16,172.16.0.0/16
The --local-subnets setting is working properly for all networks when I go
to IP -> Traffic Directions -> Local to Remote. But what is strange is that
when I go to Summary -> Hosts, only one /24 out of the whole middle /16
displays the Home icon under Domain. No other hosts or networks within
10.100.0.0/16,10.200.0.0/16, or 172.16.0.0/16 have the Home icon, and I'm
not sure why NTOP is listing just one /24
(10.10.200.0/24) as home.
Has anyone else run into this? We have a large amount of traffic, and it
would be extremely useful to sort by Domain since our network blocks are not
contiguous.
Thanks in advance!
-Laura
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
