I wasn't implying spoofing. Read the FAQ/doc about the -o | --no-mac switch. Can't so for sure it's your problem, but likely. IMO nTop should install with this as the default - not having it causes problems fairly often, more so than having it I'd bet.
G -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Hobbs Sent: Tuesday, June 03, 2008 7:38 PM To: [email protected] Subject: Re: [Ntop] wrong host name In message <[EMAIL PROTECTED] com> "Gary Gatten" <[EMAIL PROTECTED]> wrote: > Are you trusting MAC addresses? I know what you are implying, but this is a small home network and nobody is spoofing MAC addresses. Every day a couple of addresses get misinterpreted. One of the computers is always my laptop which is monitoring the port mirror on the Netgear switch and the other varies. One day its one of the student's laptop that gets labelled as my laptop and another day its a different one that gets labelled as my laptop. In each case the students are just using their laptops for web browsing and P2P file sharing and they aren't running anything that would benefit from spoofing MAC or IP addresses. I'm pretty sure ntop has somehow mixed up the name to address mapping. I also see that several other laptops don't ever get labelled by ntop with their machine name. The IP address is shown instead. Now the router does do the machine name to address mapping correctly - on all computers and it never gets it wrong. So this also makes me suspect its ntop that is getting it wrong. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Mike Hobbs > Sent: Monday, June 02, 2008 6:09 PM > To: [email protected] > Subject: [Ntop] wrong host name > I've just been monitoring our network from a laptop 192.168.1.101 > called "vicky" and for the past few days ntop has correctly > identified this host, showing the name rather than the ip address. > Other hosts also seem to be OK. > However, today I noticed that three different ip addresses all > showed up as "vicky". On inspection one of them was another > local laptop 192.168.1.113 which should really be "ann-pc" and > previously ntop correctly identified it. After resetting the > stats ntop again gets it right. > So why can ntop sometimes show the wrong host name? > "vicky" is monitoring via a netgear switch with port mirroring. > Mike > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > <font size="1"> > <div style='border:none;border-bottom:double windowtext > 2.25pt;padding:0in 0in 1.0pt 0in'> > </div> > "This email is intended to be reviewed by only the intended recipient > and may contain information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > </font> > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop -- Mike Hobbs _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font> _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
