Ggatten at waddell
Aug 8, 2009, 12:47 AM
Post #6 of 7
(1558 views)
Permalink
|
Yea, I'm not sure if the winblows version supports all the options - or it may use different args. If you didn't purchase a windows binary or compile it yourself its a crippled version. I guess stick with Ubuntu!
________________________________
From: ntop-bounces [at] unipi
To: ntop [at] unipi
Sent: Sat Aug 08 02:06:52 2009
Subject: Re: [Ntop] Importing pcap files
I just tried "sudo Ntop -f filename" on Ubuntu and it worked. I went back to my WinXP Ntop and found that many of the options (-f, -m, -V, etc) do not work.
Thanks for the help.
Gordon
On Fri, Aug 7, 2009 at 11:29 PM, Gary Gatten <Ggatten [at] waddell> wrote:
I haven't tried to do this myself and currently don't have access to test. I would google "ntop wireshark" and see what you find. There was a recent thread on this - maybe 6 weeks ago? When you specify the filename maybe use the full path? Ah, you're on Winblows.... Not sure if it supports this. You have a demo version or full version?
________________________________
From: ntop-bounces [at] unipi
To: ntop [at] unipi
Sent: Fri Aug 07 23:30:32 2009
Subject: Re: [Ntop] Importing pcap files
Hi,
When I type in Ntop -f filename, Ntop returns the message "Unrecognized option". I placed a test file in the same directory at Ntop so there is no issue with paths. I also verified that I can import the sample file into Wireshark so I know its good. I looked at the man page and I believe "-f" is the correct option. Below is a sample output
C:\Program Files\ntop-Win32>ntop -f test.pcap
Unrecognized option: -f
Am I use the "-f" option incorrectly?
Regards
Gordon
On Fri, Aug 7, 2009 at 6:12 PM, Gary Gatten <Ggatten [at] waddell> wrote:
Ntop -f filename.pcap. Check the man page for sure. Some have reported issues with this so although it should work it may not!
________________________________
From: ntop-bounces [at] unipi
To: ntop [at] unipi
Sent: Fri Aug 07 19:51:57 2009
Subject: [Ntop] Importing pcap files
Everyone,
Is is possible to import a Wireshark packet capture (pcap) file into ntop? If this is possible, how is is done?
Thanks
Gordon
"This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
_______________________________________________
Ntop mailing list
Ntop [at] unipi
http://listgateway.unipi.it/mailman/listinfo/ntop
"This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
_______________________________________________
Ntop mailing list
Ntop [at] unipi
http://listgateway.unipi.it/mailman/listinfo/ntop
<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>
|
