Luca did some session related changes in 2.1.55. Might help, might not... -g really doesn't directly affect protocol decoding - it does NOT treat broadcast as local and it makes all foreign hosts use a (NULL) 'other' entry for their hash entry. But zip, nada, squat in the protocol decode itself.
You might diff the source - protocol.c and pbuf.c, maybe sessions.c - to see if there's something that strikes you as odd between .50 and .53 -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Sunday, January 26, 2003 6:00 PM To: [EMAIL PROTECTED] Subject: [Ntop] Protocol Decoding with -g switch in 2.1.53 and 2.1.50 Hi Burton, I've taken your suggestion of getting protocol decoding going in "border gateway mode" by upgrading to 2.1.3 to a more current version (2.1.53). I've configured this to run with the following switches: -o : Don't use MAC -m : Define the subnet constituting local hosts -g : Track local hosts only However, this still does not give me protocol decoding on 2.1.53 and it also somehow does not identify the various server types with the icons (for example SMTP Server icon). Further, in Stats..Traffic, it now suddenly appears that half my traffic is broadcast traffic. If I run 2.1.53 without the -g switch, it seems as if I get protocol decoding and quick identification of server types. Plus, the traffic correctly reflects as Unicast. However, I of course also get a myriad of hosts that I'm not too interested in ;) The really funny thing is that I have 2.1.50 on another box and running it there with -o, -m and -g gives me protocol decoding and local hosts only. I thought that well, if 2.1.50 gives me the desired result, just install it on the box where 2.1.53 is running. The only hassle was, it would not compile with make giving a whole string of libtool errors. But that's an issue that I first need to spend more time with and read the FAQ to avoid wasting your time. At this stage, may I just ask your opinion on 2.1.50 working as I expect but 2.1.53 not ? Am I perhaps missing something in the -g, -m and -o settings? Thanks for your continued help with ntop. Stefan _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
