Hi Brian We do indeed have multiple interfaces, some internal and one for external access. Problem I have with monitoring the external interface only is that I can't see who is doing what internally, only the traffic between our public IP address and remote. I want to monitor the internal interface but filter it down to Internet bound / sourced traffic only if that makes sense?
On Fri, Jan 9, 2015 at 6:30 AM, Brian McCullough <[email protected]> wrote: > On Thu, Jan 08, 2015 at 03:48:26PM +0000, Robert Fakes wrote: > > Thanks Chris. > > > > Our NetBSD box does indeed route internal networks so I really need to be > > able to filter this out. > > Rob, > > Do you have two interfaces, one for internal traffic, and one for > external. I suspect not, so it is not acting as a router, but simply a > member of the network. > > If you do have two interfaces, just look at traffic on the external > interface. > > > Brian > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop >
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
