Paul,

So far so good with this version...but I have a feature request I think ;) I run a router here (mac mini with ubuntu)...eth0 for internal, and eth1 for external. Caveat is that eth1 has no IP, but is connected to a dsl modem in bridge mode. I use pppoe to get to the net, so I use iftop to listen to ppp0, instead of eth1. As it sits right now, if I use iftop to listen to eth1, it's blank, ppp0 all sorts of stuff. When my ISP flakes out, ppp0 goes down, which causes iftop to freak out a bit...occasionally maxing the CPU until I killall it. Now for the request ;)...getting iftop to strip out ppp to see the ip data. Snort can do this as well as tcpdump, shown below:

sudo tcpdump -n -I eth1 20:01:29.114342 PPPoE [ses 0xf4b0] IP 71.39.117.84.49917 > 69.63.189.31.80: Flags [.], ack 36034, win 32734, options [nop,nop,TS val 104292038 ecr 2423109216], length 0

Anyway that could happen? Thanks for a great app by the way.

James

On 11/27/10 10:38 AM, "Paul Warren" pdw@ex-parrot.com wrote:

On 27/11/2010 17:32, Dimiter Maznekov wrote:

...

There is error when make after config?

In file included from iftop.c:6: integers.h:35: warning: redefinition of `u_int8_t' /usr/include/sys/types.h:197: warning: `u_int8_t' previously declared here integers.h:39: warning: redefinition of `u_int16_t' /usr/include/sys/types.h:198: warning: `u_int16_t' previously declared here integers.h:43: warning: redefinition of `u_int32_t' /usr/include/sys/types.h:199: warning: `u_int32_t' previously declared here iftop.c:22:21: net/bpf.h: No such file or directory make: *** [iftop.o] Error 1

What system is that on?

I suspect that if you change iftop.c from

#include <net/bpf.h>

to

#include <bpf.h>

it'll work.

Paul

---

iftop-users mailing list iftop-users@lists.beasts.org http://lists.beasts.org/mailman/listinfo/iftop-users