Hi, start NTOP with "-o" parameter, that works for me to see all hosts behind a router.
Alex -------- Original Message -------- Subject: Re: [Ntop] Detailed Remote Host Information Not Showing (04-Mrz-2008 18:55) From: Keith Calligan <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] > Hi Gary, > > Thanks for the response. When I run a tcpdump on the command line, I am > seeing a bunch of traffic but the detailed traffic information isn't > showing in the graphs on ntop. I only see the remote hosts IP address in > the "Hosts Last Seen" section. > > I had NTOP configured before on another server (at a different datacenter) > about 6 months ago and it showed all of the detailed host information. > Pretty sure I installed the exact same way. > > The only thing I see is local traffic. The only remote IP I see (listed > in Local Only) is the IP address I accessed the NTOP web interface from. > Other than that, not seeing anything else except for the gateway router in > my datacenter. > > Thanks, > > Keith > > > > > > Is your SPANning / port mirroring / whatever working correctly? Try > > running tcpdump or similar to ensure all the traffic you expect to see > > is actually getting to the nTop box. > > > > Has this ever worked or a new install for you? > > > > Gary > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > > Keith Calligan > > Sent: Tuesday, March 04, 2008 10:27 AM > > To: [email protected] > > Subject: [Ntop] Detailed Remote Host Information Not Showing > > > > Hi, > > > > For some reason, I'm only seeing a few local addresses on the "All > > Protocols/Traffic" menu. Nothing shows at all for remote addresses. > > > > I enabled the "Hosts Last Seen" plugin and see other hosts connecting > > but > > I'm not able to view any detailed protocol statistics for any of these > > since this information isn't seen anywhere else. > > > > I'm running the latest version of Ntop (3.3.3) on Centos 5 > > > > Right now, I'm just running it with the following options > > > > ntop -d -i eth0 -m $iprange/16 > > > > I even tried specifying the virtual interfaces of eth0 to see if that > > would make a difference but it didn't help. > > > > Thanks, > > > > Keith Calligan > > [EMAIL PROTECTED] > > _______________________________________________ > > Ntop mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > > > > > > > <font size="1"> > > <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in > > 0in 1.0pt 0in'> > > </div> > > "This email is intended to be reviewed by only the intended recipient > > and may contain information that is privileged and/or confidential. > > If you are not the intended recipient, you are hereby notified that > > any review, use, dissemination, disclosure or copying of this email > > and its attachments, if any, is strictly prohibited. If you have > > received this email in error, please immediately notify the sender by > > return email and delete this email from your system." > > > > _______________________________________________ > > Ntop mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
