|
Hi there ntop newbie here, please help. I am interested to use ntop as an IP based traffic monitoring tool. I have been using MRTG for years, and its great, but now I want IP based measurements. I have a bunch of servers connected to a managed switch. Also the internet gateway is connected to this switch. (no firewalls). I got ntop working on a linux machine . It is running in promiscious mode. I can see all traffic to the local server, but nothing gets logged for traffic from Internet to other servers connected to the switch.  I believe the reason the ntop server cant see the Internet to other servers is that the switch is isolating each port. As far as I understand the switch remembers the IP to MAC and then MAC to switch port and isolates traffic that way. But I could be totally wrong since my understanding of networking layer level 2 is limited. If I am right then one solution seems to be to put a hub between the upstream router and the switch and connect the ntop server to that hub, so it can see all the packets that come and go to and from internet and my network But before I do this, can anyone tell me if my assumption that the switch is blocking things is correct. And does anyone know if it is possible to program a 3COM managed switch to treat one port like a hub! It is a not fun adding a third NIC to this linux box. |
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
