-j | --border-sniffer-mode has a limited subset of information available to it. It's been discussed many times on the list and in the FAQ (both the one in docs/ and the ones at http://snapshot.ntop.org)
-----Burton ---------- Original Message ---------------------------------- From: [EMAIL PROTECTED] (Jason Bailey) Reply-To: [EMAIL PROTECTED] Date: Mon, 8 Jul 2002 19:51:26 -0700 >Greetings all, > >I am attempting to use ntop on a Linux box where the secondary NIC >(eth1) is connected to a hub (not a switch) which is between my firewall >and perimeter router. I have come to the conclusion that I need to use >the -j switch; otherwise it appears ntop becomes confused and improperly >generates reports with the wrong MAC addresses. > >I am invoking ntop with the following command line: > >ntop -P /usr/local/ntop -u netdude -d -i eth1 -j -L -m >17.x.x.x/x,192.x.x.x/x,198.x.x.x/x,198.x.x.x/x > >I have omitted the IP address detail of course due to security >implications. > >When using the -j switch, the reports are not skewed with improper MAC >addresses. However some information seems to be missing such as "Last >Client Peer" and "Last Server Peer" within the individual host >information page. > >Am I invoking ntop improperly for this environment, or is this >information simply not available with the -j switch? > >TIA for your assistance! > >-Jason Bailey > >_______________________________________________ >Ntop mailing list >[EMAIL PROTECTED] >http://lists.ntop.org/mailman/listinfo/ntop > __________________________________________________ D O T E A S Y - "Join the web hosting revolution!" http://www.doteasy.com _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://lists.ntop.org/mailman/listinfo/ntop
