Eric, as you stated ntop identifies the hosts using: - MAC addresses if hosts are local - IP address if they are not local
I have a couple of weeks ago I have patched ntop in order to handle situations asa those you mentioned so it should work out of the box. Nevertheless ntop is not a wizard so it needs to be properly configured via command line options. Please mail me: - the logical architecture opf your net (with IP addresses) - the command line option you're using for starting ntop - the IP address and the NIC addresses of the host where ntop is started. Cheers, Luca ==== Hello, I'm having an issue using NTOP outside a firewall. All of my externally-accessible hosts are accessed through a one-to-one NAT through my firewall. This causes each publicly accessible IP to have the same MAC address. In most packet sniffers this isn't a problem as it identifies each host by its IP address. However, NTOP seems to identify local hosts by their MAC address. When I run NTOP, all of my local traffic shows up with the first IP address that NTOP sees. I would really like to be able to see each IP address individually. Can anyone think of a way around this? Thanks, Erik -- Luca Deri NETikos S.p.A. Via Matteucci 34/B 56124 Pisa, Italy. Ph. +39/050/968.639 Fax. +39/050/968.626 Personal: [EMAIL PROTECTED] Business: [EMAIL PROTECTED] WWW: http://www.lucaderi.org/ ICQ: 68183632 Hacker: someone who loves to program and enjoys being clever about it - Richard Stallman _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
