Short answer: You MUST have promiscuous enabled to see traffic.
Read the entry in the FAQ about promiscuous mode.
If you are concerned about the security (for example ntop running in an exposed
environment), configure it with TWO interfaces. One (with an ip address, not
promiscuous for access to the ntop web server). The second, without an ip
address but with promiscuous mode enabled for the traffic to be monitored.
This too is covered in the FAQ.
-----Burton
Hi All,
I have a very basic doubt regarding the use of promiscuous mode in
ntop.I have set the promiscuous mode configuration as "No".My general
understanding of non-promiscuous mode is that the machine will see/capture all
the packets only from that interface and destined only to that particular
interface.Will setting of the interface to non-promiscuous mode lead to packets
being sent from that particular interface being neglected by ntop? Please let
me know if am not clear.
My basic necessity is to have NTOP running on a machine and
monitor/capture traffic being sent and received only by that machine?I tried
setting the interface in non-promiscuous mode however I see "Only data
received" and i don't see any data sent traffic from this machine.Please let me
know if I need to provide some more info.
--
Subanesh
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
