I use netflow and also have the -no-mac flag, but mostly it's a hold over from when I was also using a span port. On rare occasions I'll get a local matrix to work, but most often I get the "No Data To Display (yet)" message - even though it's been running for days/weeks/months.
Next time nTop blows up I'll try removing the no mac flag and see what happens. I don't know of another way to view this info unless you look at each host and gather the data manually. G ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Braxton West Sent: Wednesday, June 18, 2008 4:21 PM To: [email protected] Subject: Re: [Ntop] Local Matrix with --no-mac No solution yet from my side. Any one else have any thoughts? ----- Original Message ---- From: Gary Gatten <[EMAIL PROTECTED]> To: [email protected] Sent: Tuesday, June 17, 2008 5:53:24 PM Subject: Re: [Ntop] Local Matrix with --no-mac Any solution to this? ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Braxton West Sent: Friday, May 30, 2008 9:26 PM To: [email protected] Subject: [Ntop] Local Matrix with --no-mac I've just started using ntop, and found it quite useful. One thing I would like to do is to understand which hosts are communicating the most with other hosts on the LAN. Because I'm using span to mirror traffic, I use the no-mac flag to ensure the IP's are used instead of the MAC addresses, as they are unreliable in this case. However, this disables the traffic matrix feature, which provides the information I wish to see. Is there another way to get this information, or some way to enable the traffic matrix when using the no-mac flag? Thanks for your help. -Braxton "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
