Hi all,
I have set up ntop v5.0. Ntop box has 3 NICs - one for management purpose
(where the ntop app is accessible) and two for monitoring purposes. Both
monitoring cards are connected to the separate switches with port mirroring
configured.
Ntop is configured to NOT merge traffic from all interfaces. If I use NIC1
everything seems to works perfectly and traffic statistics are 100% accurate.
The problem arises when I switch to NIC2 - I cannot see all hosts and traffic
statistics are not available for some of them. Interesting part of it is that I
can see "invisible" hosts based on MAC addresses (Summary->Hosts->Filter
(Show only L2 hosts) but when I switched to "L3 hosts" they disappear.
Additionally, all of them (these available with "Show only L2 hosts" option)
are marked by ntop as a "Wrong network mask or bridging enabled".
Another interesting thing is that "Total Data Sent" counter for "invisible"
hosts are DOUBLE with respect to the reality (I compared it with "darkstat"
statistics). "Total Data Sent" for the rest of the hosts is counted correctly.
I could not find any regularities which hosts statistics are collected properly
and which aren't.
Appreciate any help,
Regards,
Gabriel
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
