Title: RE: [Ntop] option -p ntop
My suggestion in the switched network case is to put ntop running as a bridge on the wire, like:
 
Ssh client----Switch-----Core Switch------Ntop Box----Servers' Switch----(ssh Servers)
 
Running ntop listening a kernel network bridging interface would be sufficient. I have the that picture running in real world.
 
Good luck.
 
Rivalino.
 
 -----Mensagem original-----
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]Em nome de Nick Weaver
Enviada em: terça-feira, 22 de novembro de 2005 17:21
Para: [email protected]; [email protected]
Assunto: RE: [Ntop] option -p ntop

Can your ntop box see the ssh traffic? If this is a pure switched network, with no port mirroring or something, then that shouldn't work.


Nick Weaver
Cisco Interoperability Engineer
KeyLabs
BottomLine Quality Management
385 South 520 West
Lindon, UT  84042
t.  801.852.9508
f.  801.852.9501
e.  [EMAIL PROTECTED]
http://www.keylabs.com/cisco/ccx




-----Original Message-----
From: [EMAIL PROTECTED] on behalf of enediel gonzalez
Sent: Tue 11/22/2005 11:56 AM
To: [email protected]
Subject: [Ntop] option -p ntop

Hello everybody:

I'm facing the following problem

Using the parameter -p on the ntop's call I selected the protocol ssh to
check on
sortDataIP.html.

when from my desktop I use the ssh connection to the PC that contains the
Ntop running, I can see changes into the report sortDataIP.html for the ssh
traffic for my desktop, but, using a ssh connection to another host on the
network (from my desktop again), I don't see that the report changes the ssh
counter.

Thanks in advance for any help.

Regards
Enediel


Linux user 398956
Debian GNU/Linux


_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to