I've tried multiple ways to set the -protocols parameter to determine what 
protocols nTop cares about.

Command lines:

/usr/local/bin/ntop -d --use-syslog=daemon 
--protocols="FTP=ftp|ftp-data,HTTP=http|www|https,DNS=name|domain" -i none
/usr/local/bin/ntop -d --use-syslog=daemon 
--protocols=FTP=ftp\|ftp-data,HTTP=http\|www\|https,DNS=name\|domain -i none

Configuring in ntop.protoSpecs on the Preferences page as 
FTP=ftp|ftp-data,HTTP=http|www|https,DNS=name|domain

Configuring under Startup options under IP Prefs "TCP/UDP Protocols To Monitor" 
as FTP=ftp|ftp-data,HTTP=http|www|https,DNS=name|domain

None of them seem to take any effect...

Under "ntop Configuration" page showing current running config I get:

Command Line

Started as....

/usr/local/bin/ntop -d --use-syslog --protocols -i none

Resolved to....

/usr/local/bin/ntop -d --use-syslog=daemon 
--protocols=FTP=ftp|ftp-data,HTTP=http|www|https,DNS=name|domain -i none

-p | --protocols

FTP=ftp|ftp-data,HTTP=http|www|https,DNS=name|domain


But under IP/Summary/Traffic I get all the defaults:

Host<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=99>

Location<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=98>

Data [cid:[email protected]] 
<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=-0>

FTP<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=2>

HTTP<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=3>

DNS<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=4>

Telnet<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=5>

NBios-IP<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=6>

Mail<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=7>

DHCP-BOOTP<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=8>

SNMP<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=9>

NNTP<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=10>

NFS/AFS<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=11>

VoIP<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=12>

X11<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=13>

SSH<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=14>

Gnutella<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=15>

Kazaa<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=16>

WinMX<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=17>

DC++<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=18>

eDonkey<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=19>

BitTorrent<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=20>

Messenger<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=21>

Other IP<http://10.100.0.143:3000/sortDataIP.html?showH=0&showL=0&col=22>


Same with the graphs under Summary/Traffic/Traffic Report.

I'm sure I'm missing something obvious, but what???

I use NetFlow interfaces exclusively, if that makes a difference.

Thanks,

Jeremy Campbell
Premium Financing Specialists, Inc.

<<inline: image001.gif>>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to