Re: [wlug] Traffic monitoring

It seems to do what I wanted and is reporting traffic that Windows is generating, however considering the above it shouldn't be seeing that traffic. Maybe my switch is really a hub in switches clothing (cheap Belkin 5 port)?

I always forget about ntop. You will see some traffic that the windows box is generating - any broadcast traffic, and any traffic that is coming from the windows box to the debian box - but you shouldn't be able to see any traffic that is direct from the windows box to the internet. Any switch you buy nowadays is actually a switch. Hubs haven't been made for many years.