[Ntop] Newb Question - adding protocols and filtering them

Tim Weid Tim.Weid at QCSI.com
Wed Mar 30 16:10:42 CEST 2005


The product is already installed with the defaults and is running.  My
problem is that the majority of my traffic is coming up as IP "other".
I believe this is MAPI traffic (RPC TCP 135) and streaming apps.  Can I
modify the listed protocols after installation?  Since it runs as a
service I figured I could edit the default file and restart the service
to pick up the changes/

 

  _____  

From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Burton Strauss
Sent: Wednesday, March 30, 2005 6:59 AM
To: ntop at Unipi.IT
Subject: RE: [Ntop] Newb Question - adding protocols and filtering them

 

Actually, the only marginal part is not explicitly telling us you're
running Windows.

 

Read the docs (esp. the man page) and you'll see mostly the UNIX
parameters.  You need to understand that ntop for windows runs as a
service and so the command line parameters are for configuring that.
ThHere is special handling of the 'command line' parameters.  Quoting
docs/FAQ:

	Q. ntop -i1 ... doesn't work
	A. ntop has special parameters under Win32

	 

	         Under win32 there are TWO COMPLETELY SEPARATE TYPES OF
PARAMETERS.

	 

	     There are the parameters to the win32 stub AND there are
parameters to ntop
	     itself.

	 

	     AFTER THE win32 parameters are the ntop parameters in the
standard (Unix)
	     -xxx format.

	 

	         ntop /c <normal parms>  runs ntop INTERACTIVELY with
the specified ntop
	         parameters

	 

	         ntop /i <parameters> installs ntop as a service to run
with the specified parameters

	 

	         ntop /d deletes the ntop service

	 

	   Remember, ntop /i and ntop /d don't actually run the service
- you need to
	   start it.

 

So, the correct syntax is

 

ntop /c -p c:\lists.txt

 

or

 

ntop /i -p c:\lists.txt

 

-----Burton

 

 

  _____  

From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Tim Weid
Sent: Wednesday, March 30, 2005 7:35 AM
To: ntop at Unipi.IT
Subject: [Ntop] Newb Question - adding protocols and filtering them

Just bought NTOP and need to add some protocols.  I have tried using the
list but I get syntax errors.  I really need to track streaming
protocols, and MAPI clients.

 

I use:

 

Ntop -p c:\lists.txt 

 

And all I get is the error

 

What is the correct syntax and where is the default folder location?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20050330/c695ab1f/attachment.htm


More information about the Ntop mailing list