Its a SUPERSTACK II - 1100. It seems like it has feature to copy all
packets to a port of my choosing. Thank you for your response.
Mike Munoz wrote:
What's the model of the 3com that you have?
On Jan 27, 2008 3:30 AM, Houtan Makeki <[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>> wrote:
Hi there ntop newbie here, please help.
I am interested to use ntop as an IP based traffic monitoring
tool. I have been using MRTG for years, and its great, but now I
want IP based measurements.
I have a bunch of servers connected to a managed switch. Also the
internet gateway is connected to this switch. (no firewalls). I
got ntop working on a linux machine . It is running in promiscious
mode. I can see all traffic to the local server, but nothing gets
logged for traffic from Internet to other servers connected to the
switch.
I believe the reason the ntop server cant see the Internet to
other servers is that the switch is isolating each port. As far as
I understand the switch remembers the IP to MAC and then MAC to
switch port and isolates traffic that way. _But I could be totally
wrong since my understanding of networking layer level 2 is limited. _
If I am right then one solution seems to be to put a hub between
the upstream router and the switch and connect the ntop server to
that hub, so it can see all the packets that come and go to and
from internet and my network
*But before I do this, can anyone tell me if my assumption that
the switch is blocking things is correct. *
And does anyone know if it is possible to program a 3COM managed
switch to treat one port like a hub! It is a not fun adding a
third NIC to this linux box.
_______________________________________________
Ntop mailing list
[email protected] <mailto:[email protected]>
http://listgateway.unipi.it/mailman/listinfo/ntop
--
Thanks,
Mike
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
