I'm 99% sure netflow records do NOT contain macs. I'm guessing it would not matter.
G -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Liberatore Sent: Wednesday, March 05, 2008 1:01 PM To: [email protected] Subject: Re: [Ntop] Re-2: Detailed Remote Host Information Not Showing this wouldnt matter on netflow right? does it even send mac addresses in flow packets? --- Keith Calligan <[EMAIL PROTECTED]> wrote: > Hi Alex, > > Thanks. That was it. I'm now seeing all of the > remote connections and > the detailed statistics. > > Thanks, > > Keith > > > > Hi, > > > > start NTOP with "-o" parameter, that works for me > to see all hosts behind > > a router. > > > > Alex > > > > -------- Original Message -------- > > Subject: Re: [Ntop] Detailed Remote Host > Information Not Showing > > (04-Mrz-2008 18:55) > > From: Keith Calligan <[EMAIL PROTECTED]> > > To: [EMAIL PROTECTED] > > > >> Hi Gary, > >> > >> Thanks for the response. When I run a tcpdump on > the command line, I am > >> seeing a bunch of traffic but the detailed > traffic information isn't > >> showing in the graphs on ntop. I only see the > remote hosts IP address > >> in > >> the "Hosts Last Seen" section. > >> > >> I had NTOP configured before on another server > (at a different > >> datacenter) > >> about 6 months ago and it showed all of the > detailed host information. > >> Pretty sure I installed the exact same way. > >> > >> The only thing I see is local traffic. The only > remote IP I see (listed > >> in Local Only) is the IP address I accessed the > NTOP web interface from. > >> Other than that, not seeing anything else except > for the gateway router > >> in > >> my datacenter. > >> > >> Thanks, > >> > >> Keith > >> > >> > >> > >> > >> > Is your SPANning / port mirroring / whatever > working correctly? Try > >> > running tcpdump or similar to ensure all the > traffic you expect to see > >> > is actually getting to the nTop box. > >> > > >> > Has this ever worked or a new install for you? > >> > > >> > Gary > >> > > >> > > >> > -----Original Message----- > >> > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > >> Of > >> > Keith Calligan > >> > Sent: Tuesday, March 04, 2008 10:27 AM > >> > To: [email protected] > >> > Subject: [Ntop] Detailed Remote Host > Information Not Showing > >> > > >> > Hi, > >> > > >> > For some reason, I'm only seeing a few local > addresses on the "All > >> > Protocols/Traffic" menu. Nothing shows at all > for remote addresses. > >> > > >> > I enabled the "Hosts Last Seen" plugin and see > other hosts connecting > >> > but > >> > I'm not able to view any detailed protocol > statistics for any of these > >> > since this information isn't seen anywhere > else. > >> > > >> > I'm running the latest version of Ntop (3.3.3) > on Centos 5 > >> > > >> > Right now, I'm just running it with the > following options > >> > > >> > ntop -d -i eth0 -m $iprange/16 > >> > > >> > I even tried specifying the virtual interfaces > of eth0 to see if that > >> > would make a difference but it didn't help. > >> > > >> > Thanks, > >> > > >> > Keith Calligan > >> > [EMAIL PROTECTED] > >> > _______________________________________________ > >> > Ntop mailing list > >> > [email protected] > >> > > http://listgateway.unipi.it/mailman/listinfo/ntop > >> > > >> > > >> > > >> > > >> > > >> > <font size="1"> > >> > <div style='border:none;border-bottom:double > windowtext > >> 2.25pt;padding:0in > >> > 0in 1.0pt 0in'> > >> > </div> > >> > "This email is intended to be reviewed by only > the intended recipient > >> > and may contain information that is privileged > and/or confidential. > >> > If you are not the intended recipient, you are > hereby notified that > >> > any review, use, dissemination, disclosure or > copying of this email > >> > and its attachments, if any, is strictly > prohibited. If you have > >> > received this email in error, please > immediately notify the sender by > >> > return email and delete this email from your > system." > >> > > >> > _______________________________________________ > >> > Ntop mailing list > >> > [email protected] > >> > > http://listgateway.unipi.it/mailman/listinfo/ntop > >> > > >> > >> _______________________________________________ > >> Ntop mailing list > >> [email protected] > >> http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > _______________________________________________ > > Ntop mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > ________________________________________________________________________ ____________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font> _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
