I do something similar but I question how accurate the information is. The only way to see all 6 vlans is to span a trunk port. Ususally your fiber uplinks from your core switch out to your secondary switches are trunks. To span a trunk port routes a ton of traffic to your NTOP machine and even if you have a gig ehternet port I don't see how it is truly seeing all of the data. I have the same issue with trying to accurately track utilization of vlans. Simply no way to have a machine capture all of the data.
I use it mostly for trending and to see who the big movers are but don't count on it to see everything. My .02 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, June 16, 2006 1:08 AM To: [EMAIL PROTECTED] Cc: [email protected] Subject: RE: [Ntop] Vlan Report Sorry Chris, but maybe i wasn't enough clear in my description. You're right but let me give you more detail. Each Vlan is on a floor and on each floor there is a SW Nortel 420 connected in fiber to the Nortel 8006. Some Ibm hub are connected to the SW Nortel 420. We're going to investigate the mirroring function. But i'm not sure we could mirroring 6 Vlan in one port. I'll try to install second nick on Ntop server. Thank for your support. K. ------------------- I think for your first question you answered your own question: "Core Switch (Nortel 8006) is installed on VLAN 1" If your switch is only on VLAN 1, you'll only see VLAN 1 traffic on it. To see all six, you need to hook up to a switch that is carrying all six VLANs and then mirror all six VLANs to the port that you'll attach Ntop to. Your second question: my guess (purely a guess with no more info) is that you only have one NIC in that machine and that NIC is attached to a mirrored port that does not accept two-way traffic (typical). Add a second NIC - one for "sniffing", one for management. Make sure the machine can communicate with the rest of the network, then worry about Ntop. Chris _________________________________________ Chris Moore Senior Network Engineer Guardian Mortgage Documents 303-942-2019 emergency (GMD Help Desk): 303-942-2002 [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, June 15, 2006 7:10 AM To: [email protected] Subject: [Ntop] Vlan Report Hello, I've got 2 problems with Ntop and impossible to find the solution....Maybe here (i hope so). Well, I've got 6 VLAN's 1- 192.168.0.0/24 2- 192.168.2.0/23 3- 192.168.4.0/23 4- 192.168.6.0/23 5- 192.168.8.0/23 6- 192.168.10.0/23 Core Switch (Nortel 8006) is installed on VLAN 1 and my server "Fedora Core 5" with Ntop is connected to Core Switch >From each Vlan i can ping address to another Vlan. But when i use Ntop i can capture only all traffic in 192.168.0.0/24 Even if i use option -m 192.168.4.0/23 i have only result from 192.168.0.0/24. I try to change net/mask from interface....same result as before. My second problem (less important), i can only access to web interface from local computer. Even on the same Vlan it is not working Thanks for your help. K. _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop ********************************************************************** Confidential/Proprietary Note The information in this email is confidential and may be legally privileged. Access to this email by anyone other than the intended addressee is unauthorized. If you are not the intended recipient of this message, any review, disclosure, copying, distribution, retention, or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you are not the intended recipient, please reply to or forward a copy of this message to the sender and delete the message, any attachments, and any copies thereof from your system. Thank you. Guardian Mtg Documents, Inc. 225 Union Boulevard, Suite 200 Lakewood, CO 80228. ********************************************************************** ********************************************************************** Confidential/Proprietary Note The information in this email is confidential and may be legally privileged. Access to this email by anyone other than the intended addressee is unauthorized. If you are not the intended recipient of this message, any review, disclosure, copying, distribution, retention, or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you are not the intended recipient, please reply to or forward a copy of this message to the sender and delete the message, any attachments, and any copies thereof from your system. Thank you. Guardian Mtg Documents, Inc. 225 Union Boulevard, Suite 200 Lakewood, CO 80228. ********************************************************************** ********************************************************************** Confidential/Proprietary Note The information in this email is confidential and may be legally privileged. Access to this email by anyone other than the intended addressee is unauthorized. If you are not the intended recipient of this message, any review, disclosure, copying, distribution, retention, or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you are not the intended recipient, please reply to or forward a copy of this message to the sender and delete the message, any attachments, and any copies thereof from your system. Thank you. Guardian Mtg Documents, Inc. 225 Union Boulevard, Suite 200 Lakewood, CO 80228. ********************************************************************** _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
