On 10/13/06, Gary Gatten <[EMAIL PROTECTED]> wrote:
You will setup a "virtual NIC" on ntop that's the interface for the netflow "port". Check some of the config options for netflow concerning timeouts - they control how often the router exports data on active and inactive sessions. If you configure netflow correctly your ntop box will see everything your router sees. NOT the actual packets - but the packet details: source, destination, ports, size, etc. Most everything that's useful.
Can you provide some samples of how you have it configured on your routers? I know the basic command to start exporting flows but... Because this box does a lot of other things as well (cacti and nagios for instance) I'd like to use a NIC those other things aren't using. With the new version of Nagios you can start it using a specific NIC from the command line and then when you configure everything via the web interface it saves that config somewhere - correct? The version I had installed, I believe, had a config file that you could edit directly. This appears to be a change...
Promiscuous mode should not stop anything from working. If starting nTop causes loss of general connections you have a different problem. Could be related to nTop - but not promiscous mode.
You would only use promiscuous mode in the case of using a span port, correct? _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
