Jesse I think this is the best solution for excluding hosts/networks from being monitored
Regards Luca On Jan 14, 2011, at 9:19 PM, Jesse Bowling wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi Jeff, > > An off-the cuff answer would be to try using the not in front, i.e., "not > host server1.domain.com and not > server2.domain.com" or perhaps "not (host server1.domain.com or host > server2.domain.com)"...Perhaps it's as simple as > that, perhaps not... > > Just a thought, > > Jesse > > On 01/14/2011 02:18 PM, Jeff Schrunk wrote: >> Pardon me if I'm posting this to the wrong list and it should go in Misc. >> >> I'm a recent user and registrant of NTOP and I need to exclude certain >> machines from monitoring for various business >> reasons. I have the FQDN for the machine but the IP address will change >> from time to time as a static IP for these is >> not possible. >> >> On the Preference Page on the Basic settings for the –B option I have been >> putting the following (using example names >> below): >> >> Capture Filter Expression (-B): "host not server1.domain.com >> <http://server1.domain.com> or server2.domain.com >> <http://server2.domain.com>" >> >> I've tried various iterations of this from changing the or to and and >> removing the quotes to a number of different >> options to no effect. I found one page on the internet using Google that >> talks to this: >> http://www.mail-archive.com/[email protected]/msg06298.html >> >> However, trying their options has not worked either. The examples in the >> manual are all about watching a specific host >> versus excluding so I could really use some help. >> >> I'm running this under Windows XP Professional on a scaled down machine (no >> other apps running/dedicated to NTOP) to >> just run NTOP. Any suggestions? >> >> Thank you very much for your time. >> >> Jeff >> >> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop > > - -- > Jesse Bowling > _______________________________________ > Incident Response Manager |~~| > Office of Information Security |\/| > University of Georgia |^^| > (706) 542-2127 |/\| > jesseb at uga dot edu |~~| > - ---------------------------------------- > > No matter that we may mount on stilts, we still must walk on our own > legs. And on the highest throne in the world, we still sit only on our > own bottom. -Michel de Montaigne > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.14 (GNU/Linux) > Comment: Using GnuPG with Red Hat - http://enigmail.mozdev.org/ > > iEYEARECAAYFAk0wr7kACgkQ5E4CHL/YJ2oV+QCgr548k09oNLsOle+MuujVvjLo > tFoAn0fLq1cMY3S3JyOnqsfpRfvpH/ds > =JY+h > -----END PGP SIGNATURE----- > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop --- "Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it. - Brian W. Kernighan _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
