There is a limit of 1K hosts (by default) for each
range. There is a log message warning you of this - look over the
output.
This can be adjusted in globals-defines.h, but can't be
changed after compile (it impacts the basic size of one of the large structures
- 1K per is a compromise between wasting huge amounts of space and handling huge
spans of IP addresses).
I think this is discussed
in docs/FAQ.
You may also want to look at the --track-local-hosts
option.
-----Burton
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Batastini
Sent: Thursday, December 01, 2005 11:32 AM
To: [email protected]
Subject: [Ntop] NTop Local Traffic
I am using :
ntop Version 3.2 SourceForge .tgz
OS i686-pc-linux-gnu
libpcap version libpcap version 0.9.2
Launching with: ./ntop -w 3000 -W 0 -u user -i eth1 -d
I have a span of a class B network being monitored by Ntop. Leaving the local subnets undefined all traffic is logged and monitored perfectly, however when I try to define my local class B, little to none of the traffic is logged as local traffic, it also doesn't seem to log those subnets as remote either. What little traffic ntop seems to log as local is random. I am using Launching with: ./ntop -w 3000 -W 0 -u user -i eth1 -m xxx.yyy.0.0/16 -d
Any ideas on what could be causing Ntop not to report properly?
Thanks in advance
Dave Batastini
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
