Sorry, but your memory is playing tricks... Per interface stats will include all packets SEEN on the interface (the filter acts before ntop sees the packet).
If ntop tracks a host, ntop creates a HostTraffic entry. That's what eats memory - 4K or more each. If it's not being tracked (i.e. remote host w/ -g), counts are included in the (invisible) Other HostTraffic entry, which is not part of the reports. That's the way it's always been. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Johan Dahlberg Sent: Saturday, May 28, 2005 2:44 AM To: [email protected] Subject: RE: [Ntop] Configuration So it seems what I want to do is not possible. But still i recall i used to have it setup like this earlier (some year ago), i just cant remember how I did this. However I might be wrong. Thanks for the answers /J > They're actually quite similar. > > -g | --track-local-hosts stores all non-local data in the 'other' > HostTraffic entry (this is invisible and doesn't get reported on) > > -B | --filter actually limits what packets ntop sees. So packets > which aren't sourced or destined for the network are never seen, BUT > unlike track-local-hosts, if the packet passes the filter, a genuine > HostTraffic entry is created for the remote site. > > -----Burton > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > Of Gary Hill > Sent: Friday, May 27, 2005 2:44 PM > To: [email protected] > Subject: RE: [Ntop] Configuration > > try -B "src net 192.168.0.0/16 or dst net 192.168.0.0/16" and get rid > of -g > > (Thats if my memory is correct and -g is track local hosts) > > > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Johan Dahlberg > Sent: 27 May 2005 19:29 > To: [email protected] > Subject: [Ntop] Configuration > > > Hello, > I'm trying to get ntop to only monitor my LAN hosts (192.168.0.0/16, > etc..), but I'd like to be able to see what hosts on the internet > they're talking with too. > > currently using: ntop -d -g -m 192.168.0.0/16 -i eth1 > > with that command only my lan hosts shows up in ntop, but I can't see > what other hosts on the internet they're talking to (except the > gateway sometimes). > > with 'ntop -d -i eth1' or 'ntop -d -i eth1 -m 192.168.0.0/16' i see > all hosts any computer on my lan is talking to listed both in ntop as > well as in the host specific pages. > > is it possible to only make ntop list the hosts on my LAN, and when > checking the host specific pages i would also be able to see any hosts > on the internet they're talking to? > > sorry for my bad english.. > > thanks > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
