[prev in list] [next in list] [prev in thread] [next in thread]
List: ntop
Subject: [Ntop] RE: Ntop Digest, Vol 17, Issue 18
From: "Rashid Habib" <rhabib () touchstone ! com ! pk>
Date: 2005-10-13 23:38:23
Message-ID: 200510132157.j9DLvTXn023348 () localhost ! localdomain
[Download RAW message or body]
Sir
I am trying to run ntop on SuSe Linux professional 9.3. It is not working
there a tutorial available ? So we don't sound dumb asking these questions.
In my case ntop along with all the libraries was installed when I installed
the OS by checking the software I wanted on it.
Thanks and regards
Ross
-----Original Message-----
From: ntop-bounces@unipi.it [mailto:ntop-bounces@unipi.it] On Behalf Of
ntop-request@unipi.it
Sent: Tuesday, October 11, 2005 11:00 AM
To: ntop@unipi.it
Subject: Ntop Digest, Vol 17, Issue 18
Send Ntop mailing list submissions to
ntop@unipi.it
To subscribe or unsubscribe via the World Wide Web, visit
http://listgateway.unipi.it/mailman/listinfo/ntop
or, via email, send a message with subject or body 'help' to
ntop-request@unipi.it
You can reach the person managing the list at
ntop-owner@unipi.it
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Ntop digest..."
Today's Topics:
1. version conflict (Brad Sumrall)
2. Re: version conflict (marco pozzi)
3. ntop- Local and remote address problem (Gurtej Sandhu)
4. RE: version conflict (Burton Strauss)
5. ntop- local host and remote host problem (Gurtej Sandhu)
----------------------------------------------------------------------
Message: 1
Date: Tue, 11 Oct 2005 07:36:28 -0400
From: "Brad Sumrall" <BSumrall@fedspec.com>
Subject: [Ntop] version conflict
To: <ntop@Unipi.IT>
Message-ID: <200510111137.j9BBb9aT008795@mailserver.unipi.it>
Content-Type: text/plain; charset="us-ascii"
I am a NTop newbie, but not a Linux newbie.
I am performing an initial installation of NTop.
Followed the links to download the dependencies, I installed the newest and
latest of all.
I get the following errors:
[root@diaglaptop src]# rpm -i ntop-3.2rc2_fc4-1.i386.rpm
error: Failed dependencies:
libcrypto.so.5 is needed by ntop-3.2rc2_fc4-1
libpcap.so.0.8.3 is needed by ntop-3.2rc2_fc4-1
libssl.so.5 is needed by ntop-3.2rc2_fc4-1
I have the newest openssl and the newest libpcap installed.
[root@diaglaptop src]# rpm -qa | grep openssl
openssl-0.9.7a-23
openssl-devel-0.9.7a-23
I have libpcap-0.8.1 installed as well.
Anyone know how to fix this one?
Brad
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/a0b1d076/att
achment-0001.htm
------------------------------
Message: 2
Date: Tue, 11 Oct 2005 15:13:55 +0200
From: marco pozzi <marco.pozzi@gmail.com>
Subject: Re: [Ntop] version conflict
To: ntop@Unipi.IT
Message-ID:
<9ce0ac970510110613w7d49d9a6q4ae0f5e41f536ab5@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Hi,
if you don't need blending edge version you could downgrade.
on my FC4 ntop works well with this version:
ntop-3.1-1.2.fc4.rf
libpcap-0.8.3-13.FC4
openssl-0.9.7f-7
Hope it help
Regards
Marco
------------------------------
Message: 3
Date: Tue, 11 Oct 2005 11:06:40 -0400
From: Gurtej Sandhu <gurtej2005@gmail.com>
Subject: [Ntop] ntop- Local and remote address problem
To: Ntop@Unipi.IT
Message-ID:
<4e130a890510110806h1bd59747s5d36c5fefce344e2@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Would anyone know what I am doing wrong.
Ntop for Windows XP.
Network diagram
LOCAL PC ------> (interface 0)router(interface 1)----->remote server
Interface 0 = Ip address 192.168.40.1 <http://192.168.40.1>
Interface 1 = Ip address 192.168.0.1 <http://192.168.0.1>
Local PC = Ip address 192.168.40.2 <http://192.168.40.2>
Remote server= IP address 192.168.0.3 <http://192.168.0.3>
ntop Setup
Interface 0 collects the flows and sends them to LOCAL PC as destination
address in the router.
The LOCAL PC is were ntop is installed.
Under Under Netflow conguration -> *Virtual Netflow Interface network my ip
address is 192.168.40.0/24 <http://192.168.40.0/24>
Under -m(local subnets) I typed in 192.168.40.0/24 <http://192.168.40.0/24>
Problem,
In ntop I see 192.168.40.1 <http://192.168.40.1> is local address but I see
192.168.40.2 <http://192.168.40.2> as remote address. I dont know what I am
doing wrong. I guess i will jus try reinstalling ntop again. I am suppost to
see 192.168.40.2 <http://192.168.40.2> as a locol address.
Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/a1a3a052/att
achment-0001.htm
------------------------------
Message: 4
Date: Tue, 11 Oct 2005 09:24:24 -0500
From: "Burton Strauss" <Burton@ntopSupport.com>
Subject: RE: [Ntop] version conflict
To: <ntop@Unipi.IT>
Message-ID: <085201c5ce6f$7c23f470$648ea8c0@zebra>
Content-Type: text/plain; charset="us-ascii"
Well... telling us what OS you are running is a good start. If it's not
fc4, then the FedoraCore 4 .rpm is probably not the one you want.
-----Burton
_____
From: ntop-bounces@unipi.it [mailto:ntop-bounces@unipi.it] On Behalf Of Brad
Sumrall
Sent: Tuesday, October 11, 2005 6:36 AM
To: ntop@Unipi.IT
Subject: [Ntop] version conflict
I am a NTop newbie, but not a Linux newbie.
I am performing an initial installation of NTop.
Followed the links to download the dependencies, I installed the newest and
latest of all.
I get the following errors:
[root@diaglaptop src]# rpm -i ntop-3.2rc2_fc4-1.i386.rpm
error: Failed dependencies:
libcrypto.so.5 is needed by ntop-3.2rc2_fc4-1
libpcap.so.0.8.3 is needed by ntop-3.2rc2_fc4-1
libssl.so.5 is needed by ntop-3.2rc2_fc4-1
I have the newest openssl and the newest libpcap installed.
[root@diaglaptop src]# rpm -qa | grep openssl
openssl-0.9.7a-23
openssl-devel-0.9.7a-23
I have libpcap-0.8.1 installed as well.
Anyone know how to fix this one?
Brad
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/c4dd0683/att
achment-0001.htm
------------------------------
Message: 5
Date: Tue, 11 Oct 2005 13:47:56 -0400
From: Gurtej Sandhu <gurtej2005@gmail.com>
Subject: [Ntop] ntop- local host and remote host problem
To: ntop@Unipi.IT
Message-ID:
<4e130a890510111047r13d3cf32k80df1b7f2c297ca5@mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
* *
*Network diagram*
*LOCAL PC ------> (interface 0)router(interface 1)----->remote server
**Interface 0 = Ip address **192.168.40.1* <http://192.168.40.1/>
*Local PC = Ip address **192.168.40.2* <http://192.168.40.2/>
*Interface 1 = Ip address **192.168.0.1* <http://192.168.0.1/>
*Remote server= IP address **192.168.0.3* <http://192.168.0.3/>
* *
*When i first installed ntop there was only one default nic called *
* *
*INTEL nic with ip address **192.168.40.2* <http://192.168.40.2/>*,
Device\npf with some long number.*
* *
*However then I had to add a netflow device under the INTEL nic. Once I
added it I called this new nic Netflow.*
* *
*Netflow nic with IP address **192.168.40.0* <http://192.168.40.0/>
* *
*Therefore when I go under the INTEL nic I am seeing the correct localhosts
and remote hosts and plus i could see my router interface as
**192.168.40.1*<http://192.168.40.1/>
*However when I switch to the netflow nic I see my Local PC with a remote
address of **192.168.40.2* <http://192.168.40.2/>* as remote host.*
* *
*So does this mean I should only use the INTEL NIC to do my network analysis
currently on this networrk and on a large scale network. But also for the
Netflow Nic why am I not seeing the LOCAL PC as a local hosts. Also on the
INTEL nic with IP address **192.168.40.2* <http://192.168.40.2/>* I could
see all the flows as well. *
* *
*So i am kinda confused in which NIC to use. The intel is giving me the
correct information.*
* *
*But under Available Plugins ->netflow it is says in the description "
Recieved flow data is reported as a separate NIC in the regular ntop
reports. Remember to switch the reporting NIC". So does this mean I use the
INTEL nic for reporting data(data analysis) or I am suppost to use the
Netflow Nic. *
**
*I want to do netflow analysis. Also I did type in the address
192.168.40.0/24 <http://192.168.40.0/24> under -m(local hosts)*
*Under Netflow conguration -> *Virtual Netflow Interface network my ip
address is **192.168.40.0/24* <http://192.168.40.0/24>
**
*So everything seems to be configured fine.*
* *
*If anyone can tell me what the problem could be please let me know.
Currently I am assuming I am only suppost to look at the INTEL nic for
netflows.*
* *
* *
*Apprecaite your help*
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://listgateway.unipi.it/pipermail/ntop/attachments/20051011/27918573/att
achment.htm
------------------------------
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
End of Ntop Digest, Vol 17, Issue 18
************************************
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic