local-subnets merely defines how ntop will categorize the traffic. If you just want to see traffic to/from specific networks, hosts, etc. the filter-expression is the right option.
You'll want to check the man page for libpcap to figure out the precise expression and don't forget the quotes. -----Burton On Thu, 10 Jan 2008, Gregory Machin wrote: > Hi > I seem to be battling with ntop .. all i want is to monitor the traffic > that passes through my dmz that comes from 2 ip ranges / remote clients > .. I need to be able to see how much bandwidth they are using and which > protocols / ports are using this bandwidth. I guess you should just define those 2 ip ranges as local networks (option -m or --local-subnets). Or if that is not what you want, you can always ignore any subset of traffic using filters (option -B aka --filter-expression). > I need graphs of this usage over a number of weeks. How do I do this or > is ntop the wrong tool ? Use the RRD module. But note that ntop primarily provides realtime view on the network, rrd graphs don't provide the same level of detail like the on-line interface. -- HH _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
