Cheers All,
Setup:
Fiber into Building
|
Fiber from outside to router
|
|_____________
|Router |
|
|
RJ45 form port 1/0/1 to Cisco 3750X port 1/0/1
|
|______________
|Cisco 3750X |
|
| _____________
|----P1----Mirror----P19-----|NTOP & nProbe |
|
|
|====All other Lan users
So all internet traffic to the LAN comes through port 1 of the Cisco Switch.
There are many VLANs on the LAN side, however Port 1 only operates VLAN 20. So
I've tried Port Mirroring(Cisco Monitor Session) as below.
Session 1
---------
Type : Local Session
Source Ports :
Both : Gi1/0/1
Destination Ports : Gi1/0/19
Encapsulation : Native
Ingress : Disabled
I am only seeing RTP traffic for some reason and very little at that. When I go
to the Hosts List I only see 255.255.255.255 & 0.0.0.0 so I'm not sure if my
port monitoring is incorrect in setup or if I didn't properly setup
ntopng/nprobe. Looking at the ntopng host's network interface statistics it
does match what ntop is reporting as 40.5GB of traffic having been passed. So I
am leaning towards an incorrect Port mirroring configuration at the switch
level.
Thanks All,
Michael Shavelieva
IT Specialist
Southcentral Kentucky Community and Technical College
1845 Loop Drive
Bowling Green, KY 42101
O:270.901.1193 C:270.202.3917
www.southcentral.kctcs.edu<http://www.bowlinggreen.kctcs.edu/>
HIGHER EDUCATION BEGINS HERE
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
