> > Question is, where is it getting broken?  What version of 
> > libpcap? Start there as ntop only "displays" what libpcap captures. 
> 
> It's a version 0.9.8 binary package. I'll have a go at compliling
> my own 1.0.0 and see if that cures it.
> 

Even with version 1.0.0, compiled by my own fair hand, ntop is
still showing the same problem. Arpwatch, which also uses libpcap
is showing MAC addresses correctly.

Any ideas about where to look next? Maybe restrict ntop to look
at only one two IPs and switch on some debugging?

Cheers, Phil.

**********************************************************************************
This email and any files transmitted with it are confidential and intended 
solely
for the use of the individual or entity to whom they are addressed. If you have
received this email in error please notify the NHS Borders Servicedesk on
01896 82 77 77.

Opinions expressed herein are those of the sender and do NOT represent the
corporate position of NHS  Borders

This footnote also confirms that this email message has been swept by 
MIMEsweeper.

*** NHS Borders 
*******************************************************************

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to