ntop : filtrage ip

ntop : filtrage ip - Réseaux - Systèmes & Réseaux Pro

Marsh Posté le 15-05-2009 à 15:42:26    

Salut a tous. J'ai une station avec cacti+ntop et je voudrais que ntop ne monitore qu'une liste bien precise de station ou de sous reseaux.
Actuellement j'utilise cette ligne de commande :

Citation :

ntop -B "no net 10.11.10.0/24"


 j'ai donc un filtre sur tout le reseau ci contre. Mais comment obtenir l'effet inverse et n'avoir que les stations que je veux monitorer?
J'ai tenter d'ajouter plusieurs argument apres ntop -B "no net 10.11.10.0/24" pour enlever d'autres reseaux sans succes.  
 
Merci d'avance.  :hello:

Reply

Marsh Posté le 15-05-2009 à 15:42:26   

Reply

Marsh Posté le 15-05-2009 à 15:59:31    

Extrait du man:
 

Citation :

2 -B --filter-expression Filters allows the user to restrict the traffic seen by ntop on just about any imaginable item.
 
The filter expression is set at run time by this parameter, but it may be changed during the ntop run on the Admin | Change Filter web page.
 
The basic format is -B filter , where the quotes are REQUIRED
 
The syntax of the filter expression uses the same BPF (Berkeley Packet Filter) expressions used by other packages such as tcpdump
 
For instance, suppose you are interested only in the traffic generated/received by the host jake.unipi.it. ntop can then be started with the following filter:
 
ntop -B src host jake.unipi.it or dst host jake.unipi.it
 
or in shorthand:
 
ntop -B host jake.unipi.it or host jake.unipi.it
 
See the 'expression' section of the tcpdump man page - usually available at http://www.tcpdump.org/tcpdump_man.html - for further information and the best quick guide to BPF filters currently available.
 
WARNING: If you are using complex filter expressions, especially those with =s or meaningful spaces in them, be sure and use the long option format, --filter-expression="xxxx" and not -B "xxxx".

Reply

Marsh Posté le 18-05-2009 à 10:55:49    

Hum je n'arrive pas a obtenir ce que je veux.  
Je ne comprend pas bien comment ajouter plusieurs options dans la meme ligne de commande.

Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed