How to configure ntop properly

Hi,

My Offices are in three locations and all are connected through point to point to link with each other.
in every location there is a core switch and vlans are created. now through ntop i want to know what traffic if flowing in vlan

Site A - Core switch (vlan 10, vlan 20)
Site B - Core Switch (Vlan 30, Vlan 40)
Site C - Core switch (vlan 40, vlan 50)

suppose some users are using ip phone which uses sip protocol, i want to know each and every details of my all vlans.

plz guide me how to configure ntop to achieve this.i am using ubuntu 10.0.4 LTS and configured ntop by apt-get install ntop
below is the print screen of ntop
 


plz guide me how to achieve this.

ntop.JPG
LVL 3
MbhushanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rich RumbleSecurity SamuraiCommented:
It's more of how you configure your switch than Ntop... If you have all traffic passing through one point, a central switch perhaps, you can have your span session/port mirror send all that data the the Ntop Nic. If you have more than one place/switch where you'd need to sniff the traffic, add more NIC's and run ntop against those:  ntop -i et0,eth1,eth2
Use comma separated nic's for multiple interfaces. But if you need to run more than one Ntop, at the local sites, then it's all how you configure your span ports or mirror ports.
For cisco gear: http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml
-rich
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MbhushanAuthor Commented:
can i get a proper documentaion for ntop for this.
0
MbhushanAuthor Commented:
Hi,

lets do one thing let me discuss the issues with u regarding ntop. right now my ntop is connected to L 2 switch and my ntop is in vlan 51(server vlan)
ntop is showing some ips, can u plz guide me how to understand ntop. i am sending u attachment of ntop also.
ntop-1.docx
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

Rich RumbleSecurity SamuraiCommented:
Obviously you don't have a SPAN port setup, a SPAN port is also called a PORT MIRROR by some switch vendors. For your Ntop box, get 2 Network cards. One is the ntop interface, one is the normal network card for you OS. Then you need to consult your switch documentation and setup a span/port mirror so you can see all the traffic passing through that switch. There is no Ntop documentation telling you how to do this part, that is up to you.
-rich
0
Steve JenningsIT ManagerCommented:
richrumble is correct. What type of switch do you habe NTOP connected to?

Steve
0
MbhushanAuthor Commented:
ntop is connected to 2800 series switch.
0
Rich RumbleSecurity SamuraiCommented:
I can't find the command online to use, contact cisco or look through your switches help. Get a second network card for your ntop to use, so that when the span port is on, you will still be able to connect the Ntop web interface. You need 2 network cards, and you need a span port.
-rich
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Network Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.