Hello,
Just a couple of quick questions. I searched the mailing list archives but
couldn't find any answers to either question.
1.-
This scenario is very simple.
I've been running ntopng 1.1 (Ubuntu 12.04 LTS) for quite some time. At
first, it was connected to the main switch and the port it was connected to
was a mirror of the uplink port. This was the typical port mirroring setup
where all traffic bound to the public Internet was captured by the ntopng
box, as could be seen on ntopng's information-rich reports. So far so good.
Then I disabled mirroring on those two ports for testing purposes and, to my
surprise, the ntopng box still captured a major part of the traffic on the
LAN. In spite of that, the state of the LAN and its traffic was best
reflected when port mirroring was enabled, but my perception may be wrong.
So, here is question #1: For ntopng to produce realistic reports, does
port-mirroring have to be enabled on its port or not?
For the record:
a. The ntop box has four NICs, eth0, eth1, eth2 and eth3. Everything runs on
eth0. The other interfaces are not used at all.
b. The switch is a 3Com Baseline Switch 2250 Plus.
2.-
I noticed ntopng's web session gets automatically closed after several
minutes (maybe an hour), forcing me to log in again to continue working. So,
here is question #2: Is it possible to disable session timeout and keep me
logged in indefinitely?
Thank you in advance,
Fernando
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
