[Ntop] Ntop & http_proxy
hkhasgiwale at gmail.com
Tue Mar 20 18:27:08 CET 2007
Joe..That was a nice attempt to sow your netdiag in text. Appreciate your
So, the magic piece is HUB..which I am trying hard to buy but couldn't find
any here. So, I think if I can mirror a port, that connects to my PIX port,
that should suffice.
By the way, do you know the way I can take my http monitoring screen out on
the LAN? I mean, right now, I have to do a VNC to my Linux box and then
start Firefox over there in order to see the ntop console screen on
How can I view this screen by typing something like: http://server.ip:3000,
from anywhere on my LAN?
At 09:49 AM 3/20/2007 +0100, AnOnJoe wrote:
>WALI / Craig :
>Here is how my network works :
>| Switched Local Network |
> | ________________
> _________|________ _______ ________ I I
> | HUB |__| PIX |__| Router |__I INTERNET I__// __|
> PROXY |
> |__________________| |_______| |________| I I
> // |_______|
> | I________________I
> | NTOP |
>In green the Network I manage
>In red the Network I can't manage...
>1) I have no access to the proxy logs...
>2) does i need to do something like that :
>| Network <http://192.168.0.1/24>192.168.0.1/24 |
> ___|___ _________
> | NTOP |__//__ | Outside |
> |_______| // |_________|
>3) How to do that ?
>2007/3/20, WALI <<mailto:hkhasgiwale at gmail.com>hkhasgiwale at gmail.com>:
>>Hi Joe...this is not related to the question you asked but I would like to
>>seek an answer to a problem I am having.
>>You say that you see 'all the traffic' of your network.
>>Where and how exactly have you placed this ntop box in your network
>>hierarchy. Are you using a mirror port/inline ?
>>At 04:26 PM 3/19/2007 +0100, you wrote:
>> >Hello, and first of all sorry for my english...
>> >I've got an ntop server on my network. All is ok I can see all the trafic.
>> >But, my users access the web through an http proxy server.
>> >On the ntop server i can't see exactly what my users are downloading /
>> >browsing, because all the traffic show in the "
>> ><<http://proxyHttp.domain.com>http://proxyHttp.domain.com ><http://proxy
>> Http.domain.com>proxyHttp.domain.com" section, and not in the
>> >real website...
>> >Is there a possibility to see the real destination of the http access ?
>> >Ntop mailing list
>> ><mailto:Ntop at unipi.it>Ntop at unipi.it
>>Ntop mailing list
>><mailto:Ntop at unipi.it>Ntop at unipi.it
>Ntop mailing list
>Ntop at unipi.it
More information about the Ntop