Ref: --no-mac switch .. Its been in there all along .. -----Original Message----- From: [EMAIL PROTECTED] on behalf of Gary Gatten Sent: Mon 4/7/2008 11:57 AM To: [email protected] Subject: Re: [Ntop] Local -vs- Remote Traffic Try "-o | --no-mac" switch. I think that will fix your issue.
G ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael P. Donnelly Sent: Monday, April 07, 2008 10:21 AM To: [email protected] Subject: [Ntop] Local -vs- Remote Traffic I'm using Ntop V 3.3.5 to monitor netflow data from three separate ISP routers connected to our wan. No matter what Ive tried %99 of my traffic is regarded a local by ntop.. www.ebay.com , 24.93.38.10 , www.unipi.it , etc.. How can I make the Local/Remote categories behave ? CONFIGURATION DETAILS: I tweaked the global-defines.h to accommodate the class b subnets #define MAX_SUBNET_HOSTS 65534 these values are in place .. -X..... 32768 and -x.....327680 My /etc/ntop.conf entries: --user ntop , --daemon , --db-file-path /usr/local/var/ntop --interface none, --no-mac -m xxx.yyy.0.0/16, zzz.aaa.0.0/16, 192.168.0.0/16, 172.16.0.0/16, 10.8.0.0/16, 10.77.0.0/16 My pertinent information in "show configuration" page: -m | --local-subnets (effective) xxx.yyy.0.0/16, zzz.aaa.0.0/16, 192.168.0.0/16, 172.16.0.0/16, 10.8.0.0/16, 10.77.0.0/16 Networks none Local Network.....255.255.255.255/32 NetFlow-device.2 Local Network.....192.168.0.0/16 NetFlow-device.3 Local Network.....10.8.0.0/16 NetFlow-device.4 Local Network.....10.8.0.0/16 Known Networks.... 10.8.0.0/16 zzz.aaa.0.0/16 172.16.0.0/16 xxx.yyy.0.0/16 <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
<<winmail.dat>>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
