There's a startup arg to specify which network ranges are local, it might be -b? Check the man and make sure you have this configured correctly for your environment.
----- Original Message ----- From: [email protected] <[email protected]> To: [email protected] <[email protected]> Sent: Tue Apr 27 09:38:42 2010 Subject: Re: [Ntop] how to monitor http and https only Ok, I got confused. Ntop is set on my Centos router. All the internet traffic goes through it. I go on the web interface All protocols --> Traffic . I choose Hosts: Remote only and I see only some of the remote hosts. I don't understand. Where can I see all the remote hosts which were accessed today? Istvan On 26.04.2010 18:34, Gary Gatten wrote: > You can't disable "everything", but with packet and protocol filters, and by > viewing specific reports - you can get pretty close to what you need. > > ----- Original Message ----- > From: [email protected]<[email protected]> > To: [email protected]<[email protected]> > Sent: Mon Apr 26 09:31:35 2010 > Subject: Re: [Ntop] how to monitor http and https only > > Thanks for the hints. But there is still too much information. > All I want is: > - 192.168.0.xxx, between 08:00-14:00, accessed the following sites: ... > - www.facebook.com, between 08:00-14:00, was accessed by the following > local IP-s: ... > > I don't need the: > - Host Traffic Stats > - Packet Statistics > - Protocol Distribution > - TCP/UDP Recently Used Ports > - IP Service Stats: Client Role > - TCP/UDP - Traffic on Other Ports > > How can I do all these? > > Istvan > > On 26.04.2010 17:12, Gary Gatten wrote: > >> Good call. One can also restrict the displayed protocols with -p, all >> remaining traffic will be displayed as "other" >> >> ----- Original Message ----- >> From: [email protected]<[email protected]> >> To: [email protected]<[email protected]>; >> [email protected]<[email protected]> >> Sent: Mon Apr 26 08:44:04 2010 >> Subject: Re: [Ntop] how to monitor http and https only >> >> Have you taken a look at the manpages for ntop? On a unix system, the "-B" >> switch followed by a pcap expression will give you want you want. >> >> e.g >> >> ntop -d -w 8080 -B "port 80 or 443" >> >> >> -----Original Message----- >> From: [email protected] >> [mailto:[email protected]] On Behalf Of Istvan Köpe >> Sent: Monday, April 26, 2010 9:40 AM >> To: [email protected] >> Subject: [Ntop] how to monitor http and https only >> >> Hello, >> >> I just installed ntop and it gives me much more information I need. I >> would like to see only the traffic on ports 80 and 443. >> How can I do that? >> >> Istvan >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
