Thanks using a file for the protocol config worked...

Jeremy Campbell
Premium Financing Specialists, Inc.

From: ntop-boun...@unipi.it [mailto:ntop-boun...@unipi.it] On Behalf Of Gary 
Gatten
Sent: Tuesday, June 16, 2009 10:30 AM
To: ntop@unipi.it
Subject: Re: [Ntop] No respect for --protocols parameter

I'll have to check this out on my config - on my new version.  On 3.2 I used 
this:

-p /usr/local/bin/ntop-protocols.list

FTP=ftp|ftp-data
HTTP=http|www|https|3128
DNS=name|domain
Telnet=telnet|login
NBios-IP=netbios-ns|netbios-dgm|netbios-ssn
Mail=pop-2|pop-3|pop3|kpop|smtp|imap|imap2
DHCP-BOOTP=67-68
SNMP=snmp|snmp-trap
NNTP=nntp
NFS=mount|pcnfs|bwnfs|nfsd|nfsd-status
X11=6000-6010
SSH=22
Gnutella=6346|6347|6348
Kazaa=1214
WinMX=6699|7730
DirectConnect=0
eDonkey=4661-4665
Streaming_A-V=554|1935

________________________________
From: ntop-boun...@unipi.it [mailto:ntop-boun...@unipi.it] On Behalf Of Jeremy 
Campbell
Sent: Tuesday, June 16, 2009 10:07 AM
To: ntop@unipi.it
Subject: [Ntop] No respect for --protocols parameter

I've tried multiple ways to set the -protocols parameter to determine what 
protocols nTop cares about.

Command lines:

/usr/local/bin/ntop -d --use-syslog=daemon 
--protocols="FTP=ftp|ftp-data,HTTP=http|www|https,DNS=name|domain" -i none
/usr/local/bin/ntop -d --use-syslog=daemon 
--protocols=FTP=ftp\|ftp-data,HTTP=http\|www\|https,DNS=name\|domain -i none

Configuring in ntop.protoSpecs on the Preferences page as 
FTP=ftp|ftp-data,HTTP=http|www|https,DNS=name|domain

Configuring under Startup options under IP Prefs "TCP/UDP Protocols To Monitor" 
as FTP=ftp|ftp-data,HTTP=http|www|https,DNS=name|domain

None of them seem to take any effect...

Under "ntop Configuration" page showing current running config I get:

But under IP/Summary/Traffic I get all the defaults:

Same with the graphs under Summary/Traffic/Traffic Report.

I'm sure I'm missing something obvious, but what???

I use NetFlow interfaces exclusively, if that makes a difference.

Thanks,

Jeremy Campbell
Premium Financing Specialists, Inc.
"This email is intended to be reviewed by only the intended recipient and may 
contain information that is privileged and/or confidential. If you are not the 
intended recipient, you are hereby notified that any review, use, 
dissemination, disclosure or copying of this email and its attachments, if any, 
is strictly prohibited. If you have received this email in error, please 
immediately notify the sender by return email and delete this email from your 
system."
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to