Sir
I am trying to run ntop on SuSe Linux professional 9.3. It is not working there a tutorial available ? So we don't sound dumb asking these questions. In my case ntop along with all the libraries was installed when I installed the OS by checking the software I wanted on it. Thanks and regards Ross -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, October 11, 2005 11:00 AM To: [email protected] Subject: Ntop Digest, Vol 17, Issue 18 Send Ntop mailing list submissions to [email protected] To subscribe or unsubscribe via the World Wide Web, visit http://listgateway.unipi.it/mailman/listinfo/ntop or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach the person managing the list at [EMAIL PROTECTED] When replying, please edit your Subject line so it is more specific than "Re: Contents of Ntop digest..." Today's Topics: 1. version conflict (Brad Sumrall) 2. Re: version conflict (marco pozzi) 3. ntop- Local and remote address problem (Gurtej Sandhu) 4. RE: version conflict (Burton Strauss) 5. ntop- local host and remote host problem (Gurtej Sandhu) ---------------------------------------------------------------------- Message: 1 Date: Tue, 11 Oct 2005 07:36:28 -0400 From: "Brad Sumrall" <[EMAIL PROTECTED]> Subject: [Ntop] version conflict To: <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" I am a NTop newbie, but not a Linux newbie. I am performing an initial installation of NTop. Followed the links to download the dependencies, I installed the newest and latest of all. I get the following errors: [EMAIL PROTECTED] src]# rpm -i ntop-3.2rc2_fc4-1.i386.rpm error: Failed dependencies: libcrypto.so.5 is needed by ntop-3.2rc2_fc4-1 libpcap.so.0.8.3 is needed by ntop-3.2rc2_fc4-1 libssl.so.5 is needed by ntop-3.2rc2_fc4-1 I have the newest openssl and the newest libpcap installed. [EMAIL PROTECTED] src]# rpm -qa | grep openssl openssl-0.9.7a-23 openssl-devel-0.9.7a-23 I have libpcap-0.8.1 installed as well. Anyone know how to fix this one? Brad -------------- next part -------------- An HTML attachment was scrubbed... URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/a0b1d076/att achment-0001.htm ------------------------------ Message: 2 Date: Tue, 11 Oct 2005 15:13:55 +0200 From: marco pozzi <[EMAIL PROTECTED]> Subject: Re: [Ntop] version conflict To: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1 Hi, if you don't need blending edge version you could downgrade. on my FC4 ntop works well with this version: ntop-3.1-1.2.fc4.rf libpcap-0.8.3-13.FC4 openssl-0.9.7f-7 Hope it help Regards Marco ------------------------------ Message: 3 Date: Tue, 11 Oct 2005 11:06:40 -0400 From: Gurtej Sandhu <[EMAIL PROTECTED]> Subject: [Ntop] ntop- Local and remote address problem To: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" Would anyone know what I am doing wrong. Ntop for Windows XP. Network diagram LOCAL PC ------> (interface 0)router(interface 1)----->remote server Interface 0 = Ip address 192.168.40.1 <http://192.168.40.1> Interface 1 = Ip address 192.168.0.1 <http://192.168.0.1> Local PC = Ip address 192.168.40.2 <http://192.168.40.2> Remote server= IP address 192.168.0.3 <http://192.168.0.3> ntop Setup Interface 0 collects the flows and sends them to LOCAL PC as destination address in the router. The LOCAL PC is were ntop is installed. Under Under Netflow conguration -> *Virtual Netflow Interface network my ip address is 192.168.40.0/24 <http://192.168.40.0/24> Under -m(local subnets) I typed in 192.168.40.0/24 <http://192.168.40.0/24> Problem, In ntop I see 192.168.40.1 <http://192.168.40.1> is local address but I see 192.168.40.2 <http://192.168.40.2> as remote address. I dont know what I am doing wrong. I guess i will jus try reinstalling ntop again. I am suppost to see 192.168.40.2 <http://192.168.40.2> as a locol address. Thanks -------------- next part -------------- An HTML attachment was scrubbed... URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/a1a3a052/att achment-0001.htm ------------------------------ Message: 4 Date: Tue, 11 Oct 2005 09:24:24 -0500 From: "Burton Strauss" <[EMAIL PROTECTED]> Subject: RE: [Ntop] version conflict To: <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" Well... telling us what OS you are running is a good start. If it's not fc4, then the FedoraCore 4 .rpm is probably not the one you want. -----Burton _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brad Sumrall Sent: Tuesday, October 11, 2005 6:36 AM To: [email protected] Subject: [Ntop] version conflict I am a NTop newbie, but not a Linux newbie. I am performing an initial installation of NTop. Followed the links to download the dependencies, I installed the newest and latest of all. I get the following errors: [EMAIL PROTECTED] src]# rpm -i ntop-3.2rc2_fc4-1.i386.rpm error: Failed dependencies: libcrypto.so.5 is needed by ntop-3.2rc2_fc4-1 libpcap.so.0.8.3 is needed by ntop-3.2rc2_fc4-1 libssl.so.5 is needed by ntop-3.2rc2_fc4-1 I have the newest openssl and the newest libpcap installed. [EMAIL PROTECTED] src]# rpm -qa | grep openssl openssl-0.9.7a-23 openssl-devel-0.9.7a-23 I have libpcap-0.8.1 installed as well. Anyone know how to fix this one? Brad -------------- next part -------------- An HTML attachment was scrubbed... URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/c4dd0683/att achment-0001.htm ------------------------------ Message: 5 Date: Tue, 11 Oct 2005 13:47:56 -0400 From: Gurtej Sandhu <[EMAIL PROTECTED]> Subject: [Ntop] ntop- local host and remote host problem To: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" * * *Network diagram* *LOCAL PC ------> (interface 0)router(interface 1)----->remote server **Interface 0 = Ip address **192.168.40.1* <http://192.168.40.1/> *Local PC = Ip address **192.168.40.2* <http://192.168.40.2/> *Interface 1 = Ip address **192.168.0.1* <http://192.168.0.1/> *Remote server= IP address **192.168.0.3* <http://192.168.0.3/> * * *When i first installed ntop there was only one default nic called * * * *INTEL nic with ip address **192.168.40.2* <http://192.168.40.2/>*, Device\npf with some long number.* * * *However then I had to add a netflow device under the INTEL nic. Once I added it I called this new nic Netflow.* * * *Netflow nic with IP address **192.168.40.0* <http://192.168.40.0/> * * *Therefore when I go under the INTEL nic I am seeing the correct localhosts and remote hosts and plus i could see my router interface as **192.168.40.1*<http://192.168.40.1/> *However when I switch to the netflow nic I see my Local PC with a remote address of **192.168.40.2* <http://192.168.40.2/>* as remote host.* * * *So does this mean I should only use the INTEL NIC to do my network analysis currently on this networrk and on a large scale network. But also for the Netflow Nic why am I not seeing the LOCAL PC as a local hosts. Also on the INTEL nic with IP address **192.168.40.2* <http://192.168.40.2/>* I could see all the flows as well. * * * *So i am kinda confused in which NIC to use. The intel is giving me the correct information.* * * *But under Available Plugins ->netflow it is says in the description " Recieved flow data is reported as a separate NIC in the regular ntop reports. Remember to switch the reporting NIC". So does this mean I use the INTEL nic for reporting data(data analysis) or I am suppost to use the Netflow Nic. * ** *I want to do netflow analysis. Also I did type in the address 192.168.40.0/24 <http://192.168.40.0/24> under -m(local hosts)* *Under Netflow conguration -> *Virtual Netflow Interface network my ip address is **192.168.40.0/24* <http://192.168.40.0/24> ** *So everything seems to be configured fine.* * * *If anyone can tell me what the problem could be please let me know. Currently I am assuming I am only suppost to look at the INTEL nic for netflows.* * * * * *Apprecaite your help* -------------- next part -------------- An HTML attachment was scrubbed... URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/27918573/att achment.htm ------------------------------ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop End of Ntop Digest, Vol 17, Issue 18 ************************************ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
