What does the P2P flag mean on a host?
A. If ntop knows enough to tag you as a P2P user, it’s also looking at the other headers to see if it can track what files you’re exchanging. If a host (i.e. a workstation) downloads a file from another host (“server”), the file name is recorded in the list ntop maintains for both of them. If a host has at least one file name recorded, it’s tagged with the “P2P” flag. Q. What does a “Virtual Host” mean. A. If a single instance of a web server handles many web sites, all of the references resolve to the same name. The web server uses the “Host:” header to determine which “index.html” page to serve up. ntop monitors port 80 (http:) exchanges and looks for the Host: which allows it to build a list of virtual hosts being handled by the web server.
