[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntop
Subject:    Re: [Ntop] Ntop + Cisco Setup - Newbie
From:       Steve <stevei () paonline ! com>
Date:       2006-05-31 1:47:35
Message-ID: 447CF5B7.2040207 () paonline ! com
[Download RAW message or body]

Thanks for the reply. I did add the 2nd NIC (no IP) and configured as 
suggested. So far so good.

Burton Strauss wrote:

>Using the second NIC is required - I'm pretty sure Cisco dumps packets
>coming INTO a span port on the switch.
>
>You want to make sure that you know which nic is which and set the -i
>(interface) and -w (web server) correctly.  The defaults (everything and
>everything) might work, but probably won't do what you want.
>
>Say eth0 is the span port NIC (configure this without an IP address for
>safety) and eth1 is the access NIC, ip 192.168.1.12...  Then you want to
>configure ntop to listen on eth0 and talk on eth1:
>
>-i eth0 -w 192.168.1.12:3000
>
>-----Burton
>
>
>-----Original Message-----
>From: ntop-bounces@unipi.it [mailto:ntop-bounces@unipi.it] On Behalf Of
>Steve Ickes
>Sent: Tuesday, May 30, 2006 9:04 AM
>To: ntop@unipi.it
>Subject: [Ntop] Ntop + Cisco Setup - Newbie
>
>Just recently installed ntop to do some preliminary testing. Ntop is
>connected to Cisco Catalyst 2950 switch with port spanning configured to
>mirror all data to ntop. However, I cannot seem to connect to ntop sensor
>via web interface. I had verified the installation prior to putting it into
>the LAN and everything was working fine.
>
>My question is in this configuration, do I need to install a second NIC card
>in my ntop box? I thought that since all data is being mirrored to the
>existing NIC, I may need a second card which would then plug into a
>non-spanned (mirrored) port on the switch which would give me access to the
>ntop interface. Or is it that I may have simply configured the switch
>incorrectly?
>
>Thank you.                 
>_______________________________________________
>Ntop mailing list
>Ntop@unipi.it
>http://listgateway.unipi.it/mailman/listinfo/ntop
>
>_______________________________________________
>Ntop mailing list
>Ntop@unipi.it
>http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
>  
>
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
[prev in list] [next in list] [prev in thread] [next in thread]