I use NTOP without netflow either. In order to see all the traffic on the LAN or Gateway, I used port mirroring on the switch to duplicate traffic from the gateway to the port my NTOP monitor runs. It works quite well in this case with minimal configuring. I can't monitor a remote router this way, but I can see all traffic moving through the router here and what hosts are talking to other remote sites.
Nathan Choate Sr. Network Administrator J-W Operating Company Longview, TX (903) 291-2820 direct line (903) 235-4417 cell [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, April 25, 2006 5:10 AM To: [email protected] Subject: [Ntop] Were to placing Ntop on the network Hello We are running a fully switched Cisco network and want to be able to see who are the top talkers both on our site and on remote sites. Now I've just set Ntop up had it running for a few hours. Its looks to be gathering info. We don't have NetFlow or anything like that configured on our routers. So Ntop is really just running in its default config. Would I be right in think that: a) Ntop is only reporting traffic that is on the LAN segment, it can't tell what is going on at a remote site b) The traffic is sees is only stuff that come though its network interface. So its not really giving me a true reflection of how busy the LAN is? _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
