Hi,
I will not comment directly on the configuration but in my experience you may have a problem to configure the WiFi card in promiscuous mode. For example in Ethereal you must sometimes de-select promiscuous mode in order to see packets.
Perhaps setting the -s parameter might help you....
Best regards,
Jon
From: [EMAIL PROTECTED]
Reply-To: [email protected]
To: [email protected]
Subject: Ntop Digest, Vol 30, Issue 23
Date: 24 Nov 2006 03:00:10 -0800
MIME-Version: 1.0
Received: from fuji.unipi.it ([131.114.21.27]) by bay0-mc12-f15.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444); Fri, 24 Nov 2006 03:00:10 -0800
Received: (qmail 56448 invoked from network); 24 Nov 2006 11:00:09 -0000
Received: from localhost (HELO fuji.unipi.it) (127.0.0.1) by 0 with SMTP; 24 Nov 2006 11:00:09 -0000
>Send Ntop mailing list submissions to
> [email protected]
>
>To subscribe or unsubscribe via the World Wide Web, visit
> http://listgateway.unipi.it/mailman/listinfo/ntop
>or, via email, send a message with subject or body 'help' to
> [EMAIL PROTECTED]
>
>You can reach the person managing the list at
> [EMAIL PROTECTED]
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of Ntop digest..."
>Today's Topics:
>
> 1. Strange behavior of Ntop (Openxtra version)
> ([EMAIL PROTECTED])
From: [EMAIL PROTECTED]
Reply-To: [email protected]
To: [email protected]
Subject: [Ntop] Strange behavior of Ntop (Openxtra version)
Date: Thu, 23 Nov 2006 18:16:03 +0100
>I notice a strange behaviour of Ntop and I would like to share my experience
>with you, with the hope to fix my issues.
>Recently I installed a Win32 version (Openxtra) of Ntop on my machine running
>XP+SP2. On my computer two network interfaces are configured: one Ethernet
>interface is built-in together with the motherboard and another one is a PCI
>wireless network card.
>On the first (Ethernet) interface Ntop works pretty fine and records all the
>traffic regularly. When I change preferences to monitor the traffic coming from
>the second network interface (wireless) no data is recorded. I am sure that a
>lot of traffic is passing through that network card since that's the only
>interface connected to the Internet and I always keep a file-sharing program
>turned on. What's weird is that no errors are spawn by the program, which seems
>to work great (even though no traffic is recorded on the proper intreface) as
>much as it does with ethernet card.
>What's going on? Can someone help me?
>
>Below you will find the first startup lines printed on the consolle
>
>Thanks a lot.
>
>Federico
>
>
>
>F:\Programmi\OPENXTRA\NTopWin32>ntop /c -i 2
>Running ntop for Win32.
>11/23/06 16:00:08 THREADMGMT[t3916]: ntop RUNSTATE: PREINIT(1)
>11/23/06 16:00:08 THREADMGMT[t3916]: ntop RUNSTATE: INIT(2)
>11/23/06 16:00:08 NOTE: Interface merge enabled by default
>11/23/06 16:00:08 Initializing gdbm databases
>11/23/06 16:00:08 NOTE: Interface merge disabled from prefs file
>11/23/06 16:00:08 ntop v.3.2
>11/23/06 16:00:08 Configured on (null), built on Nov 2005.
>11/23/06 16:00:08 Copyright 1998-2005 by Luca Deri <[EMAIL PROTECTED]>
>11/23/06 16:00:08 Get the freshest ntop from http://www.ntop.org/
>11/23/06 16:00:08 Initializing ntop
>11/23/06 16:00:08 Resetting traffic statistics for device IEEE 802.11g PCI
>Wireless Network Adapter-PC31_2
>11/23/06 16:00:08 DLT: Device 0 [\Device\NPF_{40ED907C-0FAC-4B22-9AFD-4C33C6927
>030}] is 1, mtu 1514, header 14
>11/23/06 16:00:08 Initializing gdbm databases
>11/23/06 16:00:08 VENDOR: Loading MAC address table.
>11/23/06 16:00:08 VENDOR: Checking for MAC address table file
>11/23/06 16:00:08 VENDOR: File '.\specialMAC.txt' does not need to be reloaded
>11/23/06 16:00:08 VENDOR: ntop continues ok
>11/23/06 16:00:08 VENDOR: Checking for MAC address table file
>11/23/06 16:00:08 VENDOR: File '.\oui.txt' does not need to be reloaded
>11/23/06 16:00:08 VENDOR: ntop continues ok
>11/23/06 16:00:08 Fingeprint: Loading signature file.
>11/23/06 16:00:08 ASN: Checking for Autonomous System Number table file
>11/23/06 16:00:08 ASN: Loading file '.\AS-list.txt'
>11/23/06 16:00:09 ASN: ...found 111435 lines
>11/23/06 16:00:09 ASN: ....Used 3780 KB of memory (12 per entry)
>11/23/06 16:00:09 I18N: This instance of ntop does not support multiple languag
>es
>11/23/06 16:00:09 IP2CC: Checking for IP address <-> Country Code mapping file
>11/23/06 16:00:09 IP2CC: Loading file '.\p2c.opt.table'
>11/23/06 16:00:09 IP2CC: ...found 52395 lines
>11/23/06 16:00:09 GDVERCHK: Guessing at libgd version
>11/23/06 16:00:09 GDVERCHK: ... as 2.x
>11/23/06 16:00:09 Initializing external applications
>11/23/06 16:00:09 THREADMGMT[t131680]: NPA: Started thread for network packet a
>nalyzer
>11/23/06 16:00:09 THREADMGMT[t131692]: SFP: Started thread for fingerprinting
>11/23/06 16:00:09 THREADMGMT[t131688]: SIH: Started thread for idle hosts detec
>tion
>11/23/06 16:00:09 THREADMGMT[t131656]: DNSAR(1): Started thread for DNS address
> resolution
>11/23/06 16:00:09 THREADMGMT[t2240]: NPA: network packet analyzer (packet proce
>ssor) thread running [p832]
>11/23/06 16:00:09 THREADMGMT[t2600]: SFP: Fingerprint scan thread starting [p83
>2]
>11/23/06 16:00:09 THREADMGMT[t2432]: SIH: Idle host scan thread starting [p832]
>
>11/23/06 16:00:09 THREADMGMT[t3028]: DNSAR(1): Address resolution thread runnin
>g [p832]
>11/23/06 16:00:09 Calling plugin start functions (if any)
>11/23/06 16:00:09 INITWEB: Initializing web server
>11/23/06 16:00:09 INITWEB: Initializing tcp/ip socket connections for web serve
>r
>11/23/06 16:00:09 INITWEB: Initialized socket, port 3000, address (any)
>11/23/06 16:00:09 INITWEB: Waiting for HTTP connections on port 3000
>11/23/06 16:00:09 INITWEB: Starting web server
>11/23/06 16:00:09 THREADMGMT[t131644]: INITWEB: Started thread for web server
>11/23/06 16:00:09 WEB: ntop's web server is now processing requests
>11/23/06 16:00:09 Listening on [IEEE 802.11g PCI Wireless Network Adapter-PC31_
>2]
>11/23/06 16:00:09 Loading Plugins
>11/23/06 16:00:09 ICMP: Welcome to ICMP Watch. (C) 1999-2005 by Luca Deri
>11/23/06 16:00:09 SFLOW: Welcome to sFlow.(C) 2002-04 by Luca Deri
>11/23/06 16:00:09 NETFLOW: Welcome to NetFlow.(C) 2002-05 by Luca Deri
>11/23/06 16:00:09 RRD: Welcome to Round-Robin Databases. (C) 2002-04 by Luca De
>ri.
>11/23/06 16:00:09 Calling plugin start functions (if any)
>11/23/06 16:00:09 NETFLOW: Welcome to the netFlow plugin
>11/23/06 16:00:09 NETFLOW: no devices to initialize
>11/23/06 16:00:09 RRD: Welcome to the RRD plugin
>11/23/06 16:00:09 THREADMGMT: RRD: Started thread (t131616) for data collection
>
>11/23/06 16:00:09 THREADMGMT[t592]: RRD: Data collection thread starting [p832]
>
>11/23/06 16:00:09 Note: Reporting device initally set to 0 [IEEE 802.11g PCI Wi
>reless Network Adapter-PC31_2]
>11/23/06 16:00:09 THREADMGMT[t3916]: ntop RUNSTATE: RUN(4)
>11/23/06 16:00:09 THREADMGMT[t131768]: NPS(1): Started thread for network packe
>t sniffing
>11/23/06 16:00:09 THREADMGMT[t420]: NPS(1,IEEE 802.11g PCI Wireless Network Ada
>pter-PC31_2): pcapDispatch thread starting [p832]
>11/23/06 16:00:09 THREADMGMT[t420]: NPS(1,IEEE 802.11g PCI Wireless Network Ada
>pter-PC31_2): pcapDispatch thread running [p832]
>11/23/06 16:00:09 THREADMGMT[t2600]: SFP: Fingerprint scan thread running [p832
>]
>11/23/06 16:00:09 THREADMGMT[t2432]: SIH: Idle host scan thread running [p832]
>11/23/06 16:00:19 THREADMGMT[t131536]: RRD: Started thread for throughput data
>collection
>11/23/06 16:00:19 THREADMGMT[t2148]: RRD: Throughput data collection: Thread st
>arting [p832]
>11/23/06 16:00:22 THREADMGMT[t2148]: RRD: Throughput data collection: Thread ru
>nning [p832]
>11/23/06 16:00:22 THREADMGMT[t592]: RRD: Data collection thread running [p832]
>
>
>
>
>
>
>
>
>
>
>-------------------------------------------------
>This mail sent through IMP: http://horde.org/imp/
>
>
>_______________________________________________
>Ntop mailing list
>[email protected]
>http://listgateway.unipi.it/mailman/listinfo/ntop
FREE pop-up blocking with the new MSN Toolbar MSN Toolbar Get it now!
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
