That's actually harder - there's no lookup 'table', it's all stored in the hosts data structure.
Basically, ntop creates a host entry when it sees a new MAC or IP and then populates it with information as things are discovered and adds counts to it as packets are received. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Chris Turbeville Sent: Sunday, September 14, 2003 11:38 AM To: [EMAIL PROTECTED] Subject: Re: [Ntop] --local-subnets & --no-mac > > I think you're off, because of the processing overhead. > > What you're proposing is to make the --no-mac switch more granular, with a > table of untrustworthy MAC addresses. That certainly can be done, but I > worry about the overhead of changing 17 simple if tests into database lookups. > > -----Burton > Actually I was thinking more of just preloading some mac-ip-name translations and the localsubnets. I don't think tinkering in the main packet loop should be required. But I need to look at it further. -Chris -- [EMAIL PROTECTED] Chris Turbeville NTT/VERIO Send mail with subject "send PGP Key" for PGP 6.5.2 Public key _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
