|
All that I know with the xylan is that when you are monitoring a mirored port the port is disabled partially explaination : you get the traffic as if you where on the real port but you can't send traffic thrue this port. So I don't know what's need ntop to do to get usage session an matrix but if it need to send data to get the info that's could explain why.
I don't know with other switch. |
-------Original Message-------
Date: mardi 04 mars 2003 12:00:28
Subject: Ntop digest, Vol 1 #862 - 7 msgs
Send Ntop mailing list submissions to
[EMAIL PROTECTED]
To subscribe or unsubscribe via the World Wide Web, visit
http://listgateway.unipi.it/mailman/listinfo/ntop
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]
You can reach the person managing the list at
[EMAIL PROTECTED]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Ntop digest..."
Today's Topics:
1. Ntop crashing (Bubba)
2. NTop for Mac OS X (Benjamin K. Derry)
3. RE: Ntop crashing (Burton M. Strauss III)
4. More debug info from gdb on WinNT (Dilan Arumainathan)
5. Keeping stats after ntop reset (Fernando Miguelez Palomo)
6. RE: Keeping stats after ntop reset (Burton M. Strauss III)
7. Re: Port mirroring pb ... (Blake)
--__--__--
Message: 1
Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
From: Bubba <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Date: 26 Feb 2003 21:44:59 -0600
Subject: [Ntop] Ntop crashing
Reply-To: [EMAIL PROTECTED]
I'm using Debian sid, and after awhile ntop will crash for what seems no
good reason, and I have to start it back up again. Is this a known
problem and/or can I have it restart after crashing? Or maybe some other
way to fix this? Thanks
--
Bubba <[EMAIL PROTECTED]>
--__--__--
Message: 2
Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
Date: Thu, 27 Feb 2003 16:05:44 -0600
To: [EMAIL PROTECTED]
From: "Benjamin K. Derry" <[EMAIL PROTECTED]>
Subject: [Ntop] NTop for Mac OS X
Reply-To: [EMAIL PROTECTED]
I was looking for a newer version of ntop for Mac OS X and did see an
entry for it on your download page. Is this the right place or is
someone else doing that one?
Thanks,
Ben
--
---
Benjamin K. Derry
Coordinator of Computing Services
Carl Sandburg College
2400 Tom L. Wilson Blvd.
Galesburg, IL 61401
Phone: (309) 341-5457
Fax: (309) 344-1395
E-mail: [EMAIL PROTECTED]
--__--__--
Message: 3
Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
From: "Burton M. Strauss III" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: RE: [Ntop] Ntop crashing
Date: Mon, 3 Mar 2003 07:44:58 -0600
Reply-To: [EMAIL PROTECTED]
You've given ZERO information about your setup.
Read HowTo ask for help in the docs/FAQ file and/or at
http://snapshot.ntop.org.
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bubba
Sent: Wednesday, February 26, 2003 9:45 PM
To: [EMAIL PROTECTED]
Subject: [Ntop] Ntop crashing
I'm using Debian sid, and after awhile ntop will crash for what seems no
good reason, and I have to start it back up again. Is this a known
problem and/or can I have it restart after crashing? Or maybe some other
way to fix this? Thanks
--
Bubba <[EMAIL PROTECTED]>
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
--__--__--
Message: 4
Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
From: "Dilan Arumainathan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Date: Mon, 3 Mar 2003 07:45:25 -0800
Subject: [Ntop] More debug info from gdb on WinNT
Reply-To: [EMAIL PROTECTED]
Further to my past emails regarding ntop mysteriously dieing here is a bit
more I got out of gdb. I am running the current stable version 2.1.3 running
on WinNT. There were two separte instances when ntop died. The line number
information comes up every time and I am assuming this is due to gdb not
being able to find the symbols for those libraries.
"C:/WINNT/system32/KERNEL32.dll": error reading line numbers
"C:/WINNT/system32/WSOCK32.DLL": error reading line numbers
"C:/WINNT/system32/WS2_32.dll": error reading line numbers
"C:/WINNT/system32/WS2HELP.dll": error reading line numbers
warning: LDR: Automatic DLL Relocation in ntop.exe
warning: LDR: Dll packet.dll base 10000000 relocated due to collision with
C:\WI
NNT\System32\wpcap.dll
"C:/WINNT/System32/rnr20.dll": error reading line numbers
"C:/WINNT/system32/msafd.dll": error reading line numbers
"C:/WINNT/System32/wshtcpip.dll": error reading line numbers
Program received signal SIGSEGV, Segmentation fault.
[Switching to thread 505.0x1c1]
0x78001648 in _libmsvcrt_a_iname ()
(gdb)
(gdb) bt
#0 0x78001648 in _libmsvcrt_a_iname ()
#1 0x01a3cf20 in ?? ()
#2 0x0042aa19 in queuePacket ()
(gdb)
Program received signal SIGSEGV, Segmentation fault.
[Switching to thread 472.0x1c6]
0x78001648 in _libmsvcrt_a_iname ()
(gdb) bt
#0 0x78001648 in _libmsvcrt_a_iname ()
#1 0x01ba0040 in ?? ()
#2 0x0042aa19 in queuePacket (_deviceId=0x0, h=0x1ba0040,
p=0x1ba7ec3 "\211C 3-\211S$3+\211K03+\211Ch3-\211S4\215K<QF�\001")
at pbuf.c:1313
(gdb)
--__--__--
Message: 5
Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
From: Fernando Miguelez Palomo <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Date: 03 Mar 2003 20:23:25 +0100
Subject: [Ntop] Keeping stats after ntop reset
Reply-To: [EMAIL PROTECTED]
Is there any way to avoid losing stats when ntop is restarted?
I've tried -S 2 and -S 1 options but these don't work for me. I'm using
ntop version 2.1.3 rpm built from ntop-2.1.3-0.src.rpm.
NTOP is managed by means of ntop script provided. The command line used
inside ntop script to start/stop the program is:
daemon $prog -d -P /usr/share/ntop -u ntop -w 0 -W 3003 -i eth1 -a
/var/ntop/ntop.access.log
Thanks,
Fernando
--__--__--
Message: 6
Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
From: "Burton M. Strauss III" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: RE: [Ntop] Keeping stats after ntop reset
Date: Mon, 3 Mar 2003 14:22:10 -0600
Reply-To: [EMAIL PROTECTED]
Read the description in docs/FAQ (you may need to grab a more recent one -
see documentation page at http://www.ntopsupport.com for one that's not TOO
old). It will describe the limitations of the (old) -S option as well as
some info about rrd which replaced -S in the 2.1.5x (soon to be 2.2)
versions of ntop.
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Fernando Miguelez Palomo
Sent: Monday, March 03, 2003 1:23 PM
To: [EMAIL PROTECTED]
Subject: [Ntop] Keeping stats after ntop reset
Is there any way to avoid losing stats when ntop is restarted?
I've tried -S 2 and -S 1 options but these don't work for me. I'm using
ntop version 2.1.3 rpm built from ntop-2.1.3-0.src.rpm.
NTOP is managed by means of ntop script provided. The command line used
inside ntop script to start/stop the program is:
daemon $prog -d -P /usr/share/ntop -u ntop -w 0 -W 3003 -i eth1 -a
/var/ntop/ntop.access.log
Thanks,
Fernando
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
--__--__--
Message: 7
Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
Date: Mon, 3 Mar 2003 15:20:37 -0800 (PST)
From: Blake <[EMAIL PROTECTED]>
Subject: Re: [Ntop] Port mirroring pb ...
To: loic <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
You might check your switch port mirroring
configuration and make sure it supports this. Your
switch may be the problem here ... not NTOP.
--- loic <[EMAIL PROTECTED]> wrote:
> Hi,
> description of the situation : i've got a server (RH
> 7.3) with ntop 2.1.55
> running on it. I've got 2 network interfaces eth0
> and eth1.
> I start ntop by : ntop -P /usr/share/ntop -u ntop
> -C -i eth1
> I sniff in promiscius mode what's pass thrue eth1 a
> network node. This
> interface is connected to a port that is in mirrored
> from the switch's port
> (xylan 10/32 omnistack) where goes all the traffic I
> want to have a look.
> I use the eth0 to keep on communicate with the web
> interface.
> So every thing is fine ntop is running ok I can see
> all the trafic that's
> interest me. My netcork conf is ok.
> BUT cause of course there is a but, the information
> for usage, session, and
> matrix give me the unique answer : no traffic yet
> (than all the other info
> give me a loads of details like stats etc ...)
> So I just assume that is because I am an a mirrored
> port which might disable
> the tracking .. I've tested to monitor an a hub or a
> non mirrored port and I
> got all the infos.
> I was just currious to understand why in this
> situation this 3 fonc couldn't
> appear (usage, sesssions an matrix).
>
>
>
> -------Original Message-------
>
> From: Blake
> Date: dimanche 02 mars 2003 23:41:05
> To: [EMAIL PROTECTED]
> Subject: Re: [Ntop] Port mirroring pb ...
>
> > first msg
> > I monitor a network node, with ntop 2.1.55 which
> is
> > connected on the
> > mirrorred port. My problem is that I don't get any
> > more the precious
> > informations of : "usage" "sessions" and "matrix".
> > When i'm an a normal port
> > I get all of the informations.
>
>
> First of all you really are not providing enough
> information to answer your question?? What do you
> mean when you say 'I monitor a network node"??
>
> 1) is NTOP running on the node you want to monitor
> or
> 2) is NTOP running on a seperate server connected to
> a
> switch port which you are configuring port mirroring
> to capture traffic from another port?
> 3) if #2 is correct then is the port you are
> monitoring have a server connected to it or a
> router?
> 4) if this is a Cisco switch ?? then what model is
> it?
>
> This kind of information helps.
>
> I have a question for you, how do you get "all the
> information" when you are collecting statistics on a
> port that is configured for port spanning or
> monitoring of another port? That statement does not
> make sense to me because if you connect a server to
> a
> switch without this then all you will get is
> broadcast
> traffic from other devices (and of course the
> traffic
> generated from the that server).
>
>
> > Is there any
> > solutions to get all of the
> > informations when I sniff on a mirrorred port ?
>
> what is the port configured to mirror? what is
> connected to the source port? If you connect NTOP to
> a port which is montoring another port ... you will
> get all the traffic (depending on how you configure
> the port span or mirror). If the port is not
> mirrored, you will only get broadcast traffic unless
> you specifically are looking for protocol stats sent
> and received from the machine running NTOP.
>
>
> > Thanks again for your time,
> > regards
>
>
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Tax Center - forms, calculators, tips, more
> http://taxes.yahoo.com/
> .
__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, more
http://taxes.yahoo.com/
--__--__--
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
End of Ntop Digest
. |
IncrediMail - Email has finally evolved - Click Here