[prev in list] [next in list] [prev in thread] [next in thread]
List: ntop
Subject: Re: [Ntop] Local Matrix with --no-mac
From: Braxton West <bdwest1 () yahoo ! com>
Date: 2008-06-21 14:07:50
Message-ID: 565375.42156.qm () web53311 ! mail ! re2 ! yahoo ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Luca,
The command I used was:
/usr/local/ntop/bin/ntop -w 80 -P /usr/local/ntop/share/ntop -u ntop_user -L -d -c -o \
-i eth0 -g -m "....." where the -m argument had 4 subnets in CIDR format.
I wanted to see how the hosts in those subnets communicated with each other, and the \
traffic matrix presented a nice way to do this. But, it appears the -o option \
disables the traffic matrix. Thanks,
Braxton
----- Original Message ----
From: Luca Deri <deri@ntop.org>
To: ntop@unipi.it
Sent: Thursday, June 19, 2008 9:15:14 AM
Subject: Re: [Ntop] Local Matrix with --no-mac
Braxton
can you please send the whole CLI you used in your tests?
Luca
----
Luca Deri <deri@ntop.org>
You must be the change you want to see in the world
Mahatma Gandhi
On Jun 18, 2008, at 11:20 PM, Braxton West wrote:
> No solution yet from my side. Any one else have any thoughts?
>
>
>
> ----- Original Message ----
> From: Gary Gatten <Ggatten@waddell.com>
> To: ntop@unipi.it
> Sent: Tuesday, June 17, 2008 5:53:24 PM
> Subject: Re: [Ntop] Local Matrix with --no-mac
>
> Any solution to this?
>
> From: ntop-bounces@unipi.it [mailto:ntop-bounces@unipi.it] On Behalf
> Of Braxton West
> Sent: Friday, May 30, 2008 9:26 PM
> To: ntop@unipi.it
> Subject: [Ntop] Local Matrix with --no-mac
>
> I've just started using ntop, and found it quite useful. One thing
> I would like to do is to understand which hosts are communicating
> the most with other hosts on the LAN. Because I'm using span to
> mirror traffic, I use the no-mac flag to ensure the IP's are used
> instead of the MAC addresses, as they are unreliable in this case.
> However, this disables the traffic matrix feature, which provides
> the information I wish to see. Is there another way to get this
> information, or some way to enable the traffic matrix when using the
> no-mac flag?
>
> Thanks for your help.
>
> -Braxton
>
> "This email is intended to be reviewed by only the intended
> recipient and may contain information that is privileged and/or
> confidential. If you are not the intended recipient, you are hereby
> notified that any review, use, dissemination, disclosure or copying
> of this email and its attachments, if any, is strictly prohibited.
> If you have received this email in error, please immediately notify
> the sender by return email and delete this email from your system."
>
> _______________________________________________
> Ntop mailing list
> Ntop@unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
[Attachment #5 (text/html)]
<html><head><style type="text/css"><!-- DIV {margin:0px;} \
--></style></head><body><div style="font-family:times new roman, new york, times, \
serif;font-size:12pt"><P>Luca,</P> <P> </P>
<P>The command I used was:</P>
<P> </P>
<P>/usr/local/ntop/bin/ntop -w 80 -P /usr/local/ntop/share/ntop -u ntop_user -L -d -c \
-o -i eth0 -g -m "....."</P> <P> </P>
<P>where the -m argument had 4 subnets in CIDR format.</P>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, \
serif"> </DIV> <DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new \
york, times, serif">I wanted to see how the hosts in those subnets communicated with \
each other, and the traffic matrix presented a nice way to do this. But, it \
appears the -o option disables the traffic matrix.</DIV> <DIV style="FONT-SIZE: 12pt; \
FONT-FAMILY: times new roman, new york, times, serif"> </DIV> <DIV \
style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, \
serif">Thanks,</DIV> <DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new \
york, times, serif"> </DIV> <DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new \
roman, new york, times, serif">Braxton<BR><BR></DIV> <DIV style="FONT-SIZE: 12pt; \
FONT-FAMILY: times new roman, new york, times, serif">----- Original Message \
----<BR>From: Luca Deri <deri@ntop.org><BR>To: ntop@unipi.it<BR>Sent: Thursday, \
June 19, 2008 9:15:14 AM<BR>Subject: Re: [Ntop] Local Matrix with \
--no-mac<BR><BR>Braxton<BR>can you please send the whole CLI you used in your \
tests?<BR><BR>Luca<BR><BR><BR>----<BR>Luca Deri <<A href="mailto:deri@ntop.org" \
ymailto="mailto:deri@ntop.org">deri@ntop.org</A>><BR><BR>You must be the change \
you want to see in the world<BR>Mahatma Gandhi<BR><BR><BR><BR>On Jun 18, 2008, at \
11:20 PM, Braxton West wrote:<BR><BR>> No solution yet from my side. Any one \
else have any thoughts?<BR>><BR>><BR>><BR>> ----- Original Message \
----<BR>> From: Gary Gatten <<A href="mailto:Ggatten@waddell.com" \
ymailto="mailto:Ggatten@waddell.com">Ggatten@waddell.com</A>><BR>> To: <A \
href="mailto:ntop@unipi.it" ymailto="mailto:ntop@unipi.it">ntop@unipi.it</A><BR>> \
Sent: Tuesday, June 17, 2008 5:53:24 PM<BR>> Subject: Re: [Ntop] Local Matrix with \
--no-mac<BR>><BR>> Any solution to this?<BR>><BR>> From: <A \
href="mailto:ntop-bounces@unipi.it" \
ymailto="mailto:ntop-bounces@unipi.it">ntop-bounces@unipi.it</A> [mailto:<A \
href="mailto:ntop-bounces@unipi.it" \
ymailto="mailto:ntop-bounces@unipi.it">ntop-bounces@unipi.it</A>] On Behalf \
<BR>> Of Braxton West<BR>> Sent: Friday, May 30, 2008 9:26 PM<BR>> To: <A \
href="mailto:ntop@unipi.it" ymailto="mailto:ntop@unipi.it">ntop@unipi.it</A><BR>> \
Subject: [Ntop] Local Matrix with --no-mac<BR>><BR>> I've just started using \
ntop, and found it quite useful. One thing <BR>> I would like to do is \
to understand which hosts are communicating <BR>> the most with other hosts \
on the LAN. Because I'm using span to <BR>> mirror traffic, I use the \
no-mac flag to ensure the IP's are used <BR>> instead of the MAC addresses, \
as they are unreliable in this case. <BR>> However, this disables the \
traffic matrix feature, which provides <BR>> the information I wish to \
see. Is there another way to get this <BR>> information, or some way \
to enable the traffic matrix when using the <BR>> no-mac \
flag?<BR>><BR>> Thanks for your help.<BR>><BR>> -Braxton<BR>><BR>> \
"This email is intended to be reviewed by only the intended <BR>> recipient \
and may contain information that is privileged and/or <BR>> confidential. If \
you are not the intended recipient, you are hereby <BR>> notified that any \
review, use, dissemination, disclosure or copying <BR>> of this email and \
its attachments, if any, is strictly prohibited. <BR>> If you have received \
this email in error, please immediately notify <BR>> the sender by return \
email and delete this email from your system."<BR>><BR>> \
_______________________________________________<BR>> Ntop mailing list<BR>> <A \
href="mailto:Ntop@unipi.it" ymailto="mailto:Ntop@unipi.it">Ntop@unipi.it</A><BR>> \
<A href="http://listgateway.unipi.it/mailman/listinfo/ntop" \
target=_blank>http://listgateway.unipi.it/mailman/listinfo/ntop</A><BR><BR>_______________________________________________<BR>Ntop \
mailing list<BR><A href="mailto:Ntop@unipi.it" \
ymailto="mailto:Ntop@unipi.it">Ntop@unipi.it</A><BR><A \
href="http://listgateway.unipi.it/mailman/listinfo/ntop" \
target=_blank>http://listgateway.unipi.it/mailman/listinfo/ntop</A><BR></DIV></div><br>
</body></html>
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic