I am very happy that there is a open-source tool as great as ntop, however, i have some issues with seperating local & remote hosts.
I have ntop running between a layer-3 switch that has several network segments coming to it(172.16.1.x, 172.16.2.x, etc..) and a netscreen firewall. When i don't set the "Local Subnet Address", all of the hosts display individually which is what i want. However, when i specify the Local Subnet as 172.16.0.0/16, all of the local addresses get bundled into one ip address which is the address of the netscreen firewall. I believe ntop does this automatically, but seeing all local traffic as one ip address is not very useful so is there any way to disable this??? I think ntop gets confused because the netscreen forward packets at layer 2. I think grouping things together like this is by design but it ruins things for me as i cant get individual host information. If anyone has encountered this, please let me know how you solved it. Thanks -------------------------------------- Easy + Joy + Powerful = Yahoo! Bookmarks x Toolbar http://pr.mail.yahoo.co.jp/toolbar/ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
