(1) -i fxp1 tells ntop which interface to monitor. That interface has to be up and properly configured (which could include being an unnumbered - ie monitor only) interface. Without -i ntop monitors the default interface.
(2) The filter limits the packets ntop sees, but it still sees only the packets on its network segment - read the docs/FAQ article on switched networks. (3) ntop pretty much needs to be run as root and use the -u option to switch to a less privileged account once the monitoring (libpcap) is in place. -----Burton _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joaquin Ravelo Sent: Tuesday, February 06, 2007 12:02 PM To: [email protected] Subject: [Ntop] FreeBSD ntop - interface is not working Hi I am trying to run ntop, on a Freebsd 4.9 release p3 I use the following switches: su-2.05b# ntop -M -c -m 10.71.80.156/21 -o -B "net 10.71.80.156/21" -i fxp1 And i get this error Tue Feb 6 11:11:36 2007 **ERROR** pcap_open_live(): 'BIOCSETIF: fxp1: Network is down' Tue Feb 6 11:11:36 2007 Please correct the problem or select a different interface using the -i flag Tue Feb 6 11:11:36 2007 **FATAL_ERROR** Not root, ntop shutting down... If I don't specify the interface (get rid of -i fxp1) , it works, but I see the traffic related to my pc, not the router 10.71.80.156 What could be happening? _____ Need Mail bonding? Go to the Yahoo! <http://answers.yahoo.com/dir/index;_ylc=X3oDMTFvbGNhMGE3BF9TAzM5NjU0NTEwOAR fcwMzOTY1NDUxMDMEc2VjA21haWxfdGFnbGluZQRzbGsDbWFpbF90YWcx?link=ask&sid=39654 6091> Mail Q&A for great <http://answers.yahoo.com/dir/index;_ylc=X3oDMTFvbGNhMGE3BF9TAzM5NjU0NTEwOAR fcwMzOTY1NDUxMDMEc2VjA21haWxfdGFnbGluZQRzbGsDbWFpbF90YWcx?link=ask&sid=39654 6091> tips from Yahoo! Answers users.
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
