Thanks for the reply. I did add the 2nd NIC (no IP) and configured as
suggested. So far so good.
Burton Strauss wrote:
Using the second NIC is required - I'm pretty sure Cisco dumps packets
coming INTO a span port on the switch.
You want to make sure that you know which nic is which and set the -i
(interface) and -w (web server) correctly. The defaults (everything and
everything) might work, but probably won't do what you want.
Say eth0 is the span port NIC (configure this without an IP address for
safety) and eth1 is the access NIC, ip 192.168.1.12... Then you want to
configure ntop to listen on eth0 and talk on eth1:
-i eth0 -w 192.168.1.12:3000
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Steve Ickes
Sent: Tuesday, May 30, 2006 9:04 AM
To: [email protected]
Subject: [Ntop] Ntop + Cisco Setup - Newbie
Just recently installed ntop to do some preliminary testing. Ntop is
connected to Cisco Catalyst 2950 switch with port spanning configured to
mirror all data to ntop. However, I cannot seem to connect to ntop sensor
via web interface. I had verified the installation prior to putting it into
the LAN and everything was working fine.
My question is in this configuration, do I need to install a second NIC card
in my ntop box? I thought that since all data is being mirrored to the
existing NIC, I may need a second card which would then plug into a
non-spanned (mirrored) port on the switch which would give me access to the
ntop interface. Or is it that I may have simply configured the switch
incorrectly?
Thank you.
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
