поддръжката май е спряна. ключа "-b" сега е за друго
това е най-смисленото което намерих :
http://www.mail-archive.com/ntop@unipi.it/msg13536.html

дори и линк по темата ми стига

здравейте,
искам да използвам ntop с mysql.
картинката е следната: 3 cisco switshes с port mirroring на всеки от тях. това са ностройките в ntop.conf :

--user root

### Sets the directory that ntop runs from.
--db-file-path /var/ntop

### Interface(s) that ntop will capture on (default: eth0)
--interface eth0,eth1,eth2,eth4,eth5,eth6


### Configures ntop not to trust MAC addrs.  This is used when port mirroring or SPAN
#--no-mac

### Logging messages to syslog (instead of the console):
###  NOTE: To log to a specific facility, use --use-syslog=local3
###  NOTE: The = is REQUIRED and no spaces are permitted.
--use-syslog=local3

### Tells ntop to track only local hosts as specified by the --local-subnets option
#--track-local-hosts

### Sets the port that the HTTP webserver listens on
###  NOTE: --http-server 3000 is the default
--http-server 3000

### Sets the port that the optional HTTPS webserver listens on
#--https-server 3001

### Sets the networks that ntop should consider as local.
###  NOTE: Uses dotted decimal and CIDR notation. Example: 192.168.0.0/24
###        The addresses of the interfaces are always local and don't need to be specified.
#--local-subnets xx.xx.xx.xx/yy

--local-subnets ----------------- 3 мрежи

--no-interface-merge

### Sets the domain.  ntop should be able to determine this automatically.
#--domain mydomain.com

### Sets program to run as a daemon
###  NOTE: For more than casual use, you probably want this.
--daemon

--trace-level 4

използвам centos 5.0, ntop 3.3

лошото е, че никъде в интернет не намерих някаква документация.
мерси