Greetings all, I am attempting to use ntop on a Linux box where the secondary NIC (eth1) is connected to a hub (not a switch) which is between my firewall and perimeter router. I have come to the conclusion that I need to use the -j switch; otherwise it appears ntop becomes confused and improperly generates reports with the wrong MAC addresses.
I am invoking ntop with the following command line: ntop -P /usr/local/ntop -u netdude -d -i eth1 -j -L -m 17.x.x.x/x,192.x.x.x/x,198.x.x.x/x,198.x.x.x/x I have omitted the IP address detail of course due to security implications. When using the -j switch, the reports are not skewed with improper MAC addresses. However some information seems to be missing such as "Last Client Peer" and "Last Server Peer" within the individual host information page. Am I invoking ntop improperly for this environment, or is this information simply not available with the -j switch? TIA for your assistance! -Jason Bailey _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://lists.ntop.org/mailman/listinfo/ntop
