Using the second NIC is required - I'm pretty sure Cisco dumps packets coming INTO a span port on the switch.
You want to make sure that you know which nic is which and set the -i (interface) and -w (web server) correctly. The defaults (everything and everything) might work, but probably won't do what you want. Say eth0 is the span port NIC (configure this without an IP address for safety) and eth1 is the access NIC, ip 192.168.1.12... Then you want to configure ntop to listen on eth0 and talk on eth1: -i eth0 -w 192.168.1.12:3000 -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Ickes Sent: Tuesday, May 30, 2006 9:04 AM To: [email protected] Subject: [Ntop] Ntop + Cisco Setup - Newbie Just recently installed ntop to do some preliminary testing. Ntop is connected to Cisco Catalyst 2950 switch with port spanning configured to mirror all data to ntop. However, I cannot seem to connect to ntop sensor via web interface. I had verified the installation prior to putting it into the LAN and everything was working fine. My question is in this configuration, do I need to install a second NIC card in my ntop box? I thought that since all data is being mirrored to the existing NIC, I may need a second card which would then plug into a non-spanned (mirrored) port on the switch which would give me access to the ntop interface. Or is it that I may have simply configured the switch incorrectly? Thank you. _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
