Hi Sebastien, Sébastien CRAMATTE wrote:
> I'm running pmacctd on a natted network. > pmacctd account properply local traffic. My problem is that when I visit > a website o any other thing that is after the nat router (I'm > connected with cable modem) traffic is never accounted ! > > Does this is the normal behavior ? What happens is that I've tested > with ntop too ... and ntop give me back these datas this is why I ask ... > Normally interfaces in promiscious mode should see every kind of traffic ? Do you mean that you don't see traffic from other machines on your network out to the Internet? That probably means that your machine doesn't see the traffic. If it's in promiscuous mode, that probably means that you have a switch rather than a hub. Try configuring your switch with a mirror port, or putting your sensor inline with your NAT router as a transparent bridge. Also check that you can see the traffic with tcpdump or wireshark before blaming pmacct :) Cheers, Chris. -- Aptivate | http://www.aptivate.org | Phone: +44 1223 760887 The Humanitarian Centre, Fenner's, Gresham Road, Cambridge CB1 2ES Aptivate is a not-for-profit company registered in England and Wales with company number 04980791. _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
