[prev in list] [next in list] [prev in thread] [next in thread]
List: ntop
Subject: Re: [Ntop] ntop v5 - Local / Remote Not Working
From: Luca Deri <deri () ntop ! org>
Date: 2014-01-09 18:41:43
Message-ID: 9DACC4E2-EEB6-4009-9DD7-8F87D333FAB4 () ntop ! org
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Amir
please move to ntopng, ntop v5 is EOL
Luca
On 09 Jan 2014, at 19:25, Amir Safayan <Amir.Safayan@shoregroup.com> wrote:
> ALL PROTOCOLS >> TRAFFIC >> HOSTS: Remote Only shows approximately 4 pages of \
> hosts: If I select one of the hosts and look at the Host Details, the Host Location \
> field is states: Remote (outside specified/local subnet)
>
> ALL PROTOCOLS >> TRAFFIC >> HOSTS: Local Only shows approximately 165 pages of \
> hosts: If I select one of the hosts and look at the Host Details, the Host Location \
> field is states: Local (inside specified/local subnet or known network list)
>
> ADMIN >> CONFIGURE >> STARTUP OPTIONS - both Local Subnet Address (-m) and Known \
> Subnet Address (-m) are configured with: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
>
> Why are RFC 1918 addresses still being identified as “REMOTE Hosts” ?
>
> Thanks,
>
> Amir
>
>
>
>
>
>
> From: ntop-bounces@listgateway.unipi.it [mailto:ntop-bounces@listgateway.unipi.it] \
> On Behalf OfAmir Safayan
> Sent: Thursday, January 09, 2014 12:29 PM
> To: ntop@listgateway.unipi.it
> Subject: [Ntop] ntop v5 - Local / Remote Not Working
>
> I’ve created the following local subnet address references in ADMIN >> CONFIGURE >> \
> STARTUP OPTIONS:10.0.0.0/8,172.16.0.0/12,192.168.0.0/16. I then reset stats in \
> ADMIN>> CONFIGURE >> RESET STATS.
> But I continue to see MANY Hosts identified as “REMOTE” when browsing to ALL \
> PROTOCOLS >> TRAFFIC and selecting REMOTE ONLY from the Hosts drop down menu. \
> Checking the IP address of the hosts confirm they are in the private address space \
> RFC 1918 I identified as “LOCAL Hosts. For example, 10.224.2.9, 172.16.40.59, \
> 172.16.16.137.
> The host detail page of one the hosts states “ Host Location remote (outside \
> specified/local subnet”
> Why do these hosts continue to be recognized by ntop as “REMOTE” ?
>
> Thanks,
>
> Amir
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
[Attachment #5 (unknown)]
<html><head><meta http-equiv="Content-Type" content="text/html \
charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: \
space; -webkit-line-break: after-white-space;">Amir<div>please move to ntopng, ntop \
v5 is EOL</div><div><br></div><div>Luca</div><div><br><div style=""><div>On 09 Jan \
2014, at 19:25, Amir Safayan <<a \
href="mailto:Amir.Safayan@shoregroup.com">Amir.Safayan@shoregroup.com</a>> \
wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div \
lang="EN-US" link="#0563C1" vlink="#954F72" style="font-family: Helvetica; font-size: \
12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: \
normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; \
text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; \
-webkit-text-stroke-width: 0px;"><div class="WordSection1" style="page: \
WordSection1;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: \
Calibri, sans-serif;"><span style="color: rgb(31, 73, 125);">ALL PROTOCOLS >> \
TRAFFIC >> HOSTS: Remote Only shows approximately 4 pages of \
hosts:<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, 125);">If I select \
one of the hosts and look at the Host Details, the Host Location field is \
states:<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><span style="font-size: 9pt; font-family: 'Lucida \
Sans Unicode', sans-serif; background-color: white;">Remote (outside specified/local \
subnet)<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><span style="font-size: 9pt; font-family: 'Lucida \
Sans Unicode', sans-serif; background-color: \
white;"><o:p> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; \
font-size: 11pt; font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);">ALL PROTOCOLS >> TRAFFIC >> HOSTS: Local Only shows approximately \
165 pages of hosts:<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; \
font-size: 11pt; font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);">If I select one of the hosts and look at the Host Details, the Host Location \
field is states:<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; \
font-size: 11pt; font-family: Calibri, sans-serif;"><span style="font-size: 9pt; \
font-family: 'Lucida Sans Unicode', sans-serif; background-color: white;">Local \
(inside specified/local subnet or known network list)<o:p></o:p></span></div><div \
style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;"><span style="font-size: 9pt; font-family: 'Lucida Sans Unicode', \
sans-serif; background-color: white;"><o:p> </o:p></span></div><div \
style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;"><span style="color: rgb(31, 73, 125);">ADMIN >> CONFIGURE >> \
STARTUP OPTIONS - both Local Subnet Address (-m) and Known Subnet Address (-m) are \
configured with:<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; \
font-size: 11pt; font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);">10.0.0.0/8,172.16.0.0/12,192.168.0.0/16<o:p></o:p></span></div><div \
style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;"><span style="color: rgb(31, 73, 125);"> </span></div><div \
style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;"><span style="color: rgb(31, 73, 125);">Why are RFC 1918 addresses still \
being identified as “REMOTE Hosts” ?<o:p></o:p></span></div><div style="margin: 0in \
0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;"><span style="color: \
rgb(31, 73, 125);"> </span></div><div style="margin: 0in 0in 0.0001pt; \
font-size: 11pt; font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);">Thanks,<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; \
font-size: 11pt; font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);"> </span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);">Amir<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: \
11pt; font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);"> </span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);"> </span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);"> </span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);"> </span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);"> </span></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><span style="color: rgb(31, 73, \
125);"> </span></div><div><div style="border-style: solid none none; \
border-top-color: rgb(225, 225, 225); border-top-width: 1pt; padding: 3pt 0in \
0in;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;"><b>From:</b><span class="Apple-converted-space"> </span><a \
href="mailto:ntop-bounces@listgateway.unipi.it" style="color: rgb(149, 79, 114); \
text-decoration: underline;">ntop-bounces@listgateway.unipi.it</a><span \
class="Apple-converted-space"> </span>[<a \
href="mailto:ntop-bounces@listgateway.unipi.it" style="color: rgb(149, 79, 114); \
text-decoration: underline;">mailto:ntop-bounces@listgateway.unipi.it</a>]<span \
class="Apple-converted-space"> </span><b>On Behalf Of</b>Amir \
Safayan<br><b>Sent:</b><span class="Apple-converted-space"> </span>Thursday, \
January 09, 2014 12:29 PM<br><b>To:</b><span \
class="Apple-converted-space"> </span><a href="mailto:ntop@listgateway.unipi.it" \
style="color: rgb(149, 79, 114); text-decoration: \
underline;">ntop@listgateway.unipi.it</a><br><b>Subject:</b><span \
class="Apple-converted-space"> </span>[Ntop] ntop v5 - Local / Remote Not \
Working<o:p></o:p></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: \
11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div style="margin: \
0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">I’ve created \
the following local subnet address references in ADMIN >> CONFIGURE >> \
STARTUP OPTIONS:10.0.0.0/8,172.16.0.0/12,192.168.0.0/16. I then reset stats in \
ADMIN>> CONFIGURE >> RESET STATS.<o:p></o:p></div><div style="margin: 0in \
0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: \
11pt; font-family: Calibri, sans-serif;">But I continue to see MANY Hosts identified \
as “REMOTE” when browsing to ALL PROTOCOLS >> TRAFFIC and selecting REMOTE ONLY \
from the Hosts drop down menu. Checking the IP address of the hosts \
confirm they are in the private address space RFC 1918 I identified as “LOCAL \
Hosts. For example, 10.224.2.9, 172.16.40.59, \
172.16.16.137. <o:p></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: \
11pt; font-family: Calibri, sans-serif;"><o:p> </o:p></div><div style="margin: \
0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">The host detail \
page of one the hosts states “ Host Location <span \
class="Apple-converted-space"> </span><span style="font-size: 9pt; font-family: \
'Lucida Sans Unicode', sans-serif;">remote (outside specified/local \
subnet”</span><o:p></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; \
font-family: Calibri, sans-serif;"><o:p> </o:p></div><div style="margin: 0in 0in \
0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;">Why do these hosts \
continue to be recognized by ntop as “REMOTE” ?<o:p></o:p></div><div style="margin: \
0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;"><o:p> </o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: \
11pt; font-family: Calibri, sans-serif;">Thanks,<o:p></o:p></div><div style="margin: \
0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, \
sans-serif;"><br>Amir<o:p></o:p></div><div style="margin: 0in 0in 0.0001pt; \
font-size: 11pt; font-family: Calibri, \
sans-serif;"><o:p> </o:p></div></div>_______________________________________________<br>Ntop \
mailing list<br><a href="mailto:Ntop@listgateway.unipi.it" style="color: rgb(149, 79, \
114); text-decoration: underline;">Ntop@listgateway.unipi.it</a><br><a \
href="http://listgateway.unipi.it/mailman/listinfo/ntop" style="color: rgb(149, 79, \
114); text-decoration: \
underline;">http://listgateway.unipi.it/mailman/listinfo/ntop</a></div></blockquote></div><br></div></body></html>
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic