ntop Error Codes
- Wrong network mask or bridging enabled
ntop will report this problem for those hosts that apparently have a wrong
netmask. ntop detects this problem when a host sends a packet to a broadcast
address where the destination MAC address is not FF:FF:FF:FF:FF:FF. This could
indicate that:
- such host has a wrong netmask
- it is a bridge.
- Duplicated MAC found for this IP address
ntop will report this problem for those hosts that for a single MAC address
sport several IP addresses. This could indicate that:
- Someone is sending spoofed packets
- A host has a wrong netmask hence it routes packets to the default gateway
that routes them to destination. This is quite common on networks where the
netmask has changed and some of the hosts still use the old netmask.