I have only a few machines on my LAN and am generally only interested in seeing what is going on with one particular machine at a time so EtherApe gives me the info I need but shouldn't the graph show all traffic going/coming from the WAN going through the router instead of directly to the EtherApe machine? - I mean that is actually what is happening, so it seems the graph should show that . .
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Not unless EtherApe is running on the router (i.e. the router is a pc). Most WAN routers are really a combination of router and switch, usually with a firewall.
This means that you can see only the traffic traversing the port physically attached to the EtherApe machine. Further, the router strips the WAN protocol, so you see only the IP component.
In some cases you can force the router to work in bridged mode and handle directly the WAN protocol with the EtherApe machine. ADSL routers can be bypassed this way, using pppoe to connect directly to the IPS.
Obviously in this mode only one machine at time can connect.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I have only a few machines on my LAN and am generally only interested in seeing what is going on with one particular machine at a time so EtherApe gives me the info I need but shouldn't the graph show all traffic going/coming from the WAN going through the router instead of directly to the EtherApe machine? - I mean that is actually what is happening, so it seems the graph should show that . .
Not unless EtherApe is running on the router (i.e. the router is a pc). Most WAN routers are really a combination of router and switch, usually with a firewall.
This means that you can see only the traffic traversing the port physically attached to the EtherApe machine. Further, the router strips the WAN protocol, so you see only the IP component.
In some cases you can force the router to work in bridged mode and handle directly the WAN protocol with the EtherApe machine. ADSL routers can be bypassed this way, using pppoe to connect directly to the IPS.
Obviously in this mode only one machine at time can connect.
Sorry, I meant ISP, non IPS