How can I monitor traffic between local hosts with the presented solution?
I have setup rflow on the router to monitor the LAN interface but in Ntop I see the traffic between local hosts and remote hosts but I do not see any traffic between local hosts.
I thnink this is caused by the normal behaviour of the build-in LAN switch of the router: a packet coming in port 1 is send only to port 3 or so of the destination hosts, so the LAN interface of the router will never see the traffic between hosts on the LAN.
If this is true how do I monitor local traffic, can DD-WRT define a monitor port on the switch or so?
Thanks for your thoughts on this
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
How can I monitor traffic between local hosts with the presented solution?
I have setup rflow on the router to monitor the LAN interface but in Ntop I see the traffic between local hosts and remote hosts but I do not see any traffic between local hosts.
I thnink this is caused by the normal behaviour of the build-in LAN switch of the router: a packet coming in port 1 is send only to port 3 or so of the destination hosts, so the LAN interface of the router will never see the traffic between hosts on the LAN.
If this is true how do I monitor local traffic, can DD-WRT define a monitor port on the switch or so?
Thanks for your thoughts on this