Correct, the one ntop is using to view traffic has an ip of 1.1.1.1. The other nic is used to access the web interface.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Weaver Sent: Thursday, October 06, 2005 3:09 PM To: [email protected] Subject: RE: [Ntop] Sessions Hanging You are using 2 interfaces, right? One with no IP on the mirror port, and one on a normal access layer port with an IP for the web UI? Just checking to make sure... Nick Weaver -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Grewell Sent: Thursday, October 06, 2005 1:47 PM To: [email protected] Subject: RE: [Ntop] Sessions Hanging On Thu, 2005-10-06 at 14:18 -0500, Rader, D. Alan wrote: > After more testing, it looks like whenever I watch a mirror port is when > this happens. I have tried all the below switches: > > --no-mac > -n > --numeric-ip-addresses > --no-promiscuous > > None of which made a difference. It doesn't matter if I mirror a single > vlan, or all traffic it causes sessions to hang. If I just watch the > traffic in the subnet that em1 is in, everything is fine. It doesn't do > me any good if I can't watch all traffic coming and going to/from the > Internet. Any ideas? > Are you sure you have enough hardware? My traffic is mostly in the 10MB range, with spikes up to 30 or so. On my 2x866MHz Xeon w/2GB RAM I had to restrict NTop pretty substantially to keep it up at all when watching our WAN link. Defining --local-subnets and then using --track-local-hosts to only watch those hosts in depth made the biggest difference, but it took the whole package in order to reach relative stability. It still crashes from time to time, but nowhere near as frequently as before. Here are the performance-related switches I use: --local-subnets --no-mac --track-local-hosts --disable-sessions --no-fc --disable-decoders HTH, -Aaron _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop -------------------------------------------- ATTENTION: To ensure compliance with applicable Internal Revenue Service Regulations, we inform you that any tax advice contained in this electronic message was not intended or written to be used, and cannot be used, for the purpose of avoiding penalties under the Internal Revenue Code. This message and all attachments are PRIVATE, and may contain information that is CONFIDENTIAL and PRIVILEGED. If you received this message in error, please notify the sender by reply e-mail and delete the message immediately. _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
