Well, no, not really - w/o line breaks it's all but impossible to read, that's why I specified textinfo.html, not info.html. (FWIW, this is why we ask people to use the bug report for - it has all this already in there)
However, it looks from the resolved to line like it's pretty much correct. What shows up on the trafficStats.html page, in the 1st couple of boxes where it shows the ip address etc for the interfaces, e.g.: Network Interface(s) Name Device Type Speed Sampling Rate MTU Header Address IPv6 Addresses eth1 eth1 Ethernet 0 1514 14 0.0.0.0 eth2 eth2 Ethernet 0 1514 14 0.0.0.0 -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael da Silva Pereira Sent: Tuesday, September 20, 2005 12:56 AM To: [email protected] Subject: RE: [Ntop] Ntop listening on all Interfaces. Hope this helps... ntop Configuration Basic Information ntop Version 3.1 Configured on Jul 20 2005 13:04:56 Built on Jul 20 2005 13:06:54 OS i686-pc-linux-gnu libpcap version libpcap version 0.8.3 ntop Process Id 12976 http Process Id 12982 Command line Started as.... /system/ntop/bin/ntop --skip-version-check --user ntop -n -m 196.15.251.102/255.255.255.252,172.172.172.1/255.255.255.0,172.16.0.1/255.25 5.255.0 -i eth0,eth1 Resolved to.... /system/ntop/bin/ntop --skip-version-check --user ntop -n -m 196.15.251.102/255.255.255.252,172.172.172.1/255.255.255.0,172.16.0.1/255.25 5.255.0 -i eth0,eth1 Preferences used NOTE: (effective) means that this is the value after ntop has processed the parameter.(default) means this is the default value, usually (but not always) set by a #define in globals-defines.h. -a | --access-log-file (default) (nil) -b | --disable-decoders Yes -c | --sticky-hosts (default) No -d | --daemon Yes -e | --max-table-rows (default) 128 -f | --traffic-dump-file (default) (nil) -g | --track-local-hosts Track local hosts only -o | --no-mac (default) Trust MAC Addresses -i | --interface (effective) eth0, eth1 -j | --create-other-packets (default) Disabled -k | --filter-expression-in-extra-frame (default) No -l | --pcap-log (default) (nil) -m | --local-subnets (effective) 172.16.0.0/24 -n | --numeric-ip-addresses Yes -p | --protocols (default) internal list -q | --create-suspicious-packets (default) Disabled -r | --refresh-time (default) 120 -s | --no-promiscuous (default) No -t | --trace-level (default) 3 -u | --user ntop (uid=1000, gid=100) -w | --http-server (default) Active, all interfaces, port 3000 -z | --disable-sessions Yes -B | --filter-expression (default) none -D | --domain none -F | --flow-spec (default) none -K | --enable-debug (default) No -L | --use-syslog daemon -M | --no-interface-merge (effective) (parameter -M set, Interfaces separate) No -N | --wwn-map (default) (nil) -O | --pcap-file-path (default) /system/ntop//var/ntop -P | --db-file-path (default) /system/ntop//var/ntop -Q | --spool-file-path (default) /system/ntop//var/ntop -U | --mapper (default) (nil) -W | --https-server Uninitialized --disable-schedYield (default) No --disable-instantsessionpurge (default) No --disable-mutexextrainfo (default) No --disable-stopcap (default) No --fc-only (default) No --no-fc (default) No --no-invalid-lun (default) No --p3p-cp (default) none --p3p-uri (default) none --pcap-nonblocking (default) No --skip-version-check Yes --ssl-watchdog (default) No --w3c (default) No NOTE: The --w3c flag makes the generated html MORE compatible with the w3c recommendations, but it in no way addresses all of the compatibility and markup issues. We would like to make ntop more compatible, but some basic issues of looking decent on real-world browsers mean it will never be 100%. If you find any issues, please report them to ntop-dev. Run time/Internal Web server URL http://any:3000 SSL Web server (https://) Not Active GDBM version GDBM version 1.8.3. 10/15/2002 (built May 12 2004 22:54:59) OpenSSL Version OpenSSL 0.9.7d 17 Mar 2004 zlib version 1.2.1.1 gd version (guess) 2.0.21+ Protocol Decoders Disabled Fragment Handling Enabled Tracking only local hosts Yes # IP Protocols Being Monitored 19 # Protocol slots 3922 # IP Ports Being Monitored 174 # IP Ports slots 348 WebServer Request Queue 10 Devices (Network Interfaces) 3 Domain name (short) (nil) IP to country flag table (entries) 52395 Total Hash Collisions (Vendor/Special) (lookup) 0 ntop Web Server Item http:// https:// # Handled Requests 28 - # Successful requests (200) 26 - # Bad (We don't want to talk with you) requests 0 - # Invalid requests - 401 DENIED 1 - # Invalid requests - 403 FORBIDDEN 0 - # Invalid requests - 404 NOT FOUND 0 - NOTE: Counts may not total because of in-process requests. Each request to the ntop web server - frameset, individual page, chart, etc. is counted separately # Handled SIGPIPE Errors 0 Memory allocation - data segment arena limit, getrlimit(RLIMIT_DATA, ...) -1 Allocated blocks (ordblks) 24 Allocated (arena) 4456448 Used (uordblks) 4436296 Free (fordblks) 20152 Memory allocation - mmapped Allocated blocks (hblks) 104 Allocated bytes (hblkhd) 16113664 Host Memory Cache Limit #define MAX_HOSTS_CACHE_LEN 512 Current Size 0 Maximum Size 0 # Entries Reused 0 Packets Received 3198297 Processed Immediately 3185385 Queued 12912 Current Queue 0 Maximum Queue 9 Host/Session counts - global Purged Hosts 379 Host/Session counts - Device 0 (eth0) Hash Bucket Size 1.9 KB Actual Hash Size 16384 Stored hosts 4 Bucket List Length [min 1][max 1][avg 1.0] Max host lookup 0 Host/Session counts - Device 1 (eth1) Hash Bucket Size 1.9 KB Actual Hash Size 16384 Stored hosts 32 Bucket List Length [min 1][max 5][avg 1.2] Max host lookup 5 Host/Session counts - Virtual Device 2 (eth1:1) Hash Bucket Size 1.9 KB Actual Hash Size 0 Stored hosts 0 Bucket List Length [min 1][max 5][avg 1.2] Max host lookup 0 ----- Address Resolution ----- DNS Sniffing (other hosts requests) DNS Packets sniffed 0 DNS Packets processed 0 Stored in cache (includes aliases) 0 DNS Lookup Calls: DNS resolution attempts 0 ....Success: Resolved 0 ....Failed 0 DNS lookups stored in cache 0 Host addresses kept numeric 0 NOTE: 'DNS lookups stored in cache' includes HOST_NOT_FOUND replies. Thus it may be larger than the number of 'Success: Resolved' queries. Thread counts Active 7 Dequeue 1 Children (active) 8 Directory (search) order Data Files . /system/ntop//share/ntop Config Files . /system/ntop//etc/ntop /etc Plugins ./plugins /system/ntop//lib/ntop/plugins NOTE: REMEMBER that the . (current working directory) value will be different when you run ntop from the command line vs. a cron job or startup script! Compile Time: ./configure ./configure parameters --prefix=/system/ntop/ --with-gd-root=/system/ntop/gd/ Built on (Host) i686-pc-linux-gnu Built for(Target) i686-pc-linux-gnu compiler (CFLAGS) gcc -g -O2 -I/usr/local/include -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC -DHAVE_CONFIG_H include path -I/system/ntop/gd//include system libraries -lglib -L/usr/local/lib -L/system/ntop/gd//lib -lxml2 -lglib -lpthread -lresolv -lnsl -lcrypt -lc -lssl -lcrypto -lpcap -lgdbm -lgd -lpng -lz install path /system/ntop/ GNU C (gcc) version 3.3.4 (3.3.4) uname data sysname(Linux) release(2.6.10) version(#4 SMP Thu Aug 18 15:36:56 SAST 2005) machine(i686) Internationalization (i18n) i18n enabled No [ Click here for a more extensive, text version of this page, suitable for inclusion into a bug report ] ---------------------------------------------------------------------------- ---- Report created on Tue Sep 20 07:54:00 2005 [ntop uptime: 18:23:48] Generated by ntop v.3.1 MT (SSL) [i686-pc-linux-gnu] Build: Jul 20 2005 13:06:54. Listening on [eth0,eth1] without a kernel (libpcap) filtering expression Web report active on interface eth0 C 1998-2004 by Luca Deri -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Burton Strauss Sent: 19 September 2005 05:01 PM To: [email protected] Subject: RE: [Ntop] Ntop listening on all Interfaces. Don't know - you haven't given enough info. Open up textinfo.html page and cut/paste the settings stuff and the information about the interfaces. Also the log messages relating to these options during startup. That should show how ntop is interpreting your commands and what it's gathered on its own. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael da Silva Pereira Sent: Monday, September 19, 2005 9:22 AM To: [email protected] Subject: [Ntop] Ntop listening on all Interfaces. Hi, I'm having a problem with getting ntop to track only local hosts on several interfaces. This is my setup: I am call ntop like thos: /system/ntop/bin/ntop --skip-version-check --user ntop -n -m 196.15.251.102/255.255.255.252,172.172.172.1/255.255.255.0,172.16.0.1/255.25 5.255.0 -i eth0,eth1 My IP addresses are as follows: eth0 inet addr:196.15.251.102 Bcast:196.15.251.255 Mask:255.255.255.252 eth1 inet addr:172.172.172.1 Bcast:172.172.255.255 Mask:255.255.255.0 eth1:1 inet addr:172.16.0.1 Bcast:172.16.255.255 Mask:255.255.255.0 Now the only data I can see ntop is picking up is the data on my first range(eth0) which id 196.15.251.102/24. Is there anything I'm doing wrong? Thanks, Michael _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
