As someone else pointed out, -m is the arg to set local networks. Other than that I'm not sure what logic if any ntop uses to determine local vs. remote. I think the networks assigned to the interfaces in the ntop box are considered local - but beyond that no clue.
Gary -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of James Sent: Wednesday, October 31, 2007 1:47 PM To: [email protected]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [Ntop] NTOP reporting IP address as local when the are remote [EMAIL PROTECTED] wrote: > I just upgraded from ntop 3.2 under Fedora Core 4 to ntop 3.3 running Fedora Core 7. Ntop is receiving netflow data from a Cisco CAT6500. I have a list of subnets that are considered local. However, I am getting remote addresses listed as local. Example: 4.71.104.165 is listed as remote and 4.71.104.187 is listed as local. Neither of these are local. > > Both should be remote. I installed ntop as a rpm using ntop-3.3-1.fc7.rpm. All of my local addresses are in the RFC 1918 172.16.0.0 - 172.31.255.255 range. > > What can I look for to get the local vs. remote correct? > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > Did you try setting your /etc/default/ntop GETOPT = "-m 172.0.0.0/8" -m sets the local subnets on your machine _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop =========================================================================== "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
