You need to create a span/monitor port on a vlan somewhere where you are seeing the most traffic and have that feed into your box. From the sound of it you are only seeing switch traffic, which wouldn't really tell you anything useful.
Greg Williams IT Security Manager/Security Principal Department of Information Technology University of Colorado Colorado Springs From: [email protected] [mailto:[email protected]] On Behalf Of Warwick Chapman Sent: Tuesday, February 11, 2014 8:16 AM To: [email protected] Subject: [Ntop] Where to locate an ntopng box Howdy Thank you Luca and team for a great product. We have the following topology: LAN --> Cisco ASA --> Cisco ISP I presently have the box with ntopng running on it plugged into the ASA's switch but it is capturing very little network activity at all. How do I ensure that it intercepts all the traffic? Must I add another network adapter and bridge them and place the box inline between LAN and Cisco ASA or between Cisco ASA and Cisco ISP? Tiny volumes on 15mbps line. -- Warwick Bruce Chapman | 083 7797 094 | http://wa.rwick.com Please support the DA's Election 2014 Campaign by donating here<http://donations.da.org.za/?r=2489>.
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
