(1) Pls change the subject when you reply with a new question, ESPECIALLY to
the digest - it lets other search for similar questions.
(2) The instructions are in files in the docs/ directory of the source, many
of which are copied over during the install.
Start with the man page (man ntop).
Then look at docs/1STRUN.txt and docs/FAQ. The FAQ is installed - in
both text and html versions (usually in /usr/share/ntop/html/faq.html),
along with the binaries.
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Rashid Habib
Sent: Thursday, October 13, 2005 6:38 PM
To: [email protected]
Subject: [Ntop] RE: Ntop Digest, Vol 17, Issue 18
Sir
I am trying to run ntop on SuSe Linux professional 9.3. It is not working
there a tutorial available ? So we don't sound dumb asking these questions.
In my case ntop along with all the libraries was installed when I installed
the OS by checking the software I wanted on it.
Thanks and regards
Ross
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, October 11, 2005 11:00 AM
To: [email protected]
Subject: Ntop Digest, Vol 17, Issue 18
Send Ntop mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
http://listgateway.unipi.it/mailman/listinfo/ntop
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]
You can reach the person managing the list at
[EMAIL PROTECTED]
When replying, please edit your Subject line so it is more specific than
"Re: Contents of Ntop digest..."
Today's Topics:
1. version conflict (Brad Sumrall)
2. Re: version conflict (marco pozzi)
3. ntop- Local and remote address problem (Gurtej Sandhu)
4. RE: version conflict (Burton Strauss)
5. ntop- local host and remote host problem (Gurtej Sandhu)
----------------------------------------------------------------------
Message: 1
Date: Tue, 11 Oct 2005 07:36:28 -0400
From: "Brad Sumrall" <[EMAIL PROTECTED]>
Subject: [Ntop] version conflict
To: <[email protected]>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"
I am a NTop newbie, but not a Linux newbie.
I am performing an initial installation of NTop.
Followed the links to download the dependencies, I installed the newest and
latest of all.
I get the following errors:
[EMAIL PROTECTED] src]# rpm -i ntop-3.2rc2_fc4-1.i386.rpm
error: Failed dependencies:
libcrypto.so.5 is needed by ntop-3.2rc2_fc4-1
libpcap.so.0.8.3 is needed by ntop-3.2rc2_fc4-1
libssl.so.5 is needed by ntop-3.2rc2_fc4-1
I have the newest openssl and the newest libpcap installed.
[EMAIL PROTECTED] src]# rpm -qa | grep openssl
openssl-0.9.7a-23
openssl-devel-0.9.7a-23
I have libpcap-0.8.1 installed as well.
Anyone know how to fix this one?
Brad
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/a0b1d076/att
achment-0001.htm
------------------------------
Message: 2
Date: Tue, 11 Oct 2005 15:13:55 +0200
From: marco pozzi <[EMAIL PROTECTED]>
Subject: Re: [Ntop] version conflict
To: [email protected]
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain; charset=ISO-8859-1
Hi,
if you don't need blending edge version you could downgrade.
on my FC4 ntop works well with this version:
ntop-3.1-1.2.fc4.rf
libpcap-0.8.3-13.FC4
openssl-0.9.7f-7
Hope it help
Regards
Marco
------------------------------
Message: 3
Date: Tue, 11 Oct 2005 11:06:40 -0400
From: Gurtej Sandhu <[EMAIL PROTECTED]>
Subject: [Ntop] ntop- Local and remote address problem
To: [email protected]
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"
Would anyone know what I am doing wrong.
Ntop for Windows XP.
Network diagram
LOCAL PC ------> (interface 0)router(interface 1)----->remote server
Interface 0 = Ip address 192.168.40.1 <http://192.168.40.1> Interface 1 = Ip
address 192.168.0.1 <http://192.168.0.1> Local PC = Ip address 192.168.40.2
<http://192.168.40.2> Remote server= IP address 192.168.0.3
<http://192.168.0.3> ntop Setup Interface 0 collects the flows and sends
them to LOCAL PC as destination address in the router.
The LOCAL PC is were ntop is installed.
Under Under Netflow conguration -> *Virtual Netflow Interface network my ip
address is 192.168.40.0/24 <http://192.168.40.0/24> Under -m(local subnets)
I typed in 192.168.40.0/24 <http://192.168.40.0/24>
Problem,
In ntop I see 192.168.40.1 <http://192.168.40.1> is local address but I see
192.168.40.2 <http://192.168.40.2> as remote address. I dont know what I am
doing wrong. I guess i will jus try reinstalling ntop again. I am suppost to
see 192.168.40.2 <http://192.168.40.2> as a locol address.
Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/a1a3a052/att
achment-0001.htm
------------------------------
Message: 4
Date: Tue, 11 Oct 2005 09:24:24 -0500
From: "Burton Strauss" <[EMAIL PROTECTED]>
Subject: RE: [Ntop] version conflict
To: <[email protected]>
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"
Well... telling us what OS you are running is a good start. If it's not
fc4, then the FedoraCore 4 .rpm is probably not the one you want.
-----Burton
_____
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brad
Sumrall
Sent: Tuesday, October 11, 2005 6:36 AM
To: [email protected]
Subject: [Ntop] version conflict
I am a NTop newbie, but not a Linux newbie.
I am performing an initial installation of NTop.
Followed the links to download the dependencies, I installed the newest and
latest of all.
I get the following errors:
[EMAIL PROTECTED] src]# rpm -i ntop-3.2rc2_fc4-1.i386.rpm
error: Failed dependencies:
libcrypto.so.5 is needed by ntop-3.2rc2_fc4-1
libpcap.so.0.8.3 is needed by ntop-3.2rc2_fc4-1
libssl.so.5 is needed by ntop-3.2rc2_fc4-1
I have the newest openssl and the newest libpcap installed.
[EMAIL PROTECTED] src]# rpm -qa | grep openssl
openssl-0.9.7a-23
openssl-devel-0.9.7a-23
I have libpcap-0.8.1 installed as well.
Anyone know how to fix this one?
Brad
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/c4dd0683/att
achment-0001.htm
------------------------------
Message: 5
Date: Tue, 11 Oct 2005 13:47:56 -0400
From: Gurtej Sandhu <[EMAIL PROTECTED]>
Subject: [Ntop] ntop- local host and remote host problem
To: [email protected]
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"
* *
*Network diagram*
*LOCAL PC ------> (interface 0)router(interface 1)----->remote server
**Interface 0 = Ip address **192.168.40.1* <http://192.168.40.1/> *Local PC
= Ip address **192.168.40.2* <http://192.168.40.2/> *Interface 1 = Ip
address **192.168.0.1* <http://192.168.0.1/> *Remote server= IP address
**192.168.0.3* <http://192.168.0.3/>
* *
*When i first installed ntop there was only one default nic called *
* *
*INTEL nic with ip address **192.168.40.2* <http://192.168.40.2/>*,
Device\npf with some long number.*
* *
*However then I had to add a netflow device under the INTEL nic. Once I
added it I called this new nic Netflow.*
* *
*Netflow nic with IP address **192.168.40.0* <http://192.168.40.0/>
* *
*Therefore when I go under the INTEL nic I am seeing the correct localhosts
and remote hosts and plus i could see my router interface as
**192.168.40.1*<http://192.168.40.1/>
*However when I switch to the netflow nic I see my Local PC with a remote
address of **192.168.40.2* <http://192.168.40.2/>* as remote host.*
* *
*So does this mean I should only use the INTEL NIC to do my network analysis
currently on this networrk and on a large scale network. But also for the
Netflow Nic why am I not seeing the LOCAL PC as a local hosts. Also on the
INTEL nic with IP address **192.168.40.2* <http://192.168.40.2/>* I could
see all the flows as well. *
* *
*So i am kinda confused in which NIC to use. The intel is giving me the
correct information.*
* *
*But under Available Plugins ->netflow it is says in the description "
Recieved flow data is reported as a separate NIC in the regular ntop
reports. Remember to switch the reporting NIC". So does this mean I use the
INTEL nic for reporting data(data analysis) or I am suppost to use the
Netflow Nic. *
**
*I want to do netflow analysis. Also I did type in the address
192.168.40.0/24 <http://192.168.40.0/24> under -m(local hosts)* *Under
Netflow conguration -> *Virtual Netflow Interface network my ip address is
**192.168.40.0/24* <http://192.168.40.0/24>
**
*So everything seems to be configured fine.*
* *
*If anyone can tell me what the problem could be please let me know.
Currently I am assuming I am only suppost to look at the INTEL nic for
netflows.*
* *
* *
*Apprecaite your help*
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/27918573/att
achment.htm
------------------------------
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
End of Ntop Digest, Vol 17, Issue 18
************************************
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
