Mailing List Archive: NTop: Users

network flows

Index | Next | Previous | View Threaded

rcozzani at link

Oct 5, 2001, 1:10 AM

Post #1 of 4 (755 views)
Permalink

network flows

Hi all,

I've downloaded the snapshot of 3 oct and now I've my copy of ntop running
on my linux 2.2.19 box.

I'm playing with the many powerfull options, but I've some problem with
the -F options.

My idiot flow.list looks like this:

MyTraffic='src net 195.103.158.0/24 and dst host 195.103.158.58',ExternalTraffic='src net ! 195.103.158.0/24'

ntop starts well, but when I go to the Data rcvd page, in the Netflows page
I see only MyTraffic and icmpWatchPlugin, not ExternalTraffic.

If I change my idiot flow.list in this way:

ExternalTraffic='src net ! 195.103.158.0/24',MyTraffic='src net 195.103.158.0/24 and dst host 195.103.158.58'

in the Netflows page appears ExternalTraffic.

Which is the correct syntax of the netflows options?

thanks

Riccardo

Ggatten at waddell

Oct 11, 2009, 2:16 PM

Post #2 of 4 (711 views)
Permalink

Re: Network Flows [In reply to]

-F is very basic. No way to graph it directly that I'm aware of, but indirectly I'm sure you can.

"Microburst"?

MySQL makes it much easier to see history vs. RRD.

________________________________

From: ntop-bounces [at] listgateway
To: ntop [at] listgateway
Sent: Sun Oct 11 15:07:34 2009
Subject: [Ntop] Network Flows

Hi All,
Thank you all for the great product.
I would like to know if it's possible to create a graph from a Network Flows created using the -F option?

Also do you have any idea how I can monitor micro bursts?
One last question is there any advantage using Mysql?

Many Thanks...

________________________________

Windows Live: Keep your friends up to date with what you do online. <http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_1:092010>

<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>

Ggatten at waddell

Oct 11, 2009, 2:16 PM

Post #3 of 4 (719 views)
Permalink

Re: Network Flows [In reply to]

Ggatten at waddell

Sep 14, 2011, 3:04 AM

Post #4 of 4 (141 views)
Permalink

Re: Network Flows [In reply to]

As mentioned in several html reports as well as the faq; "network flows" have nothing to do with "netflow". Ignore "network flows"; view traffic stats acquired via netflow just as you would a typical ethernet interface.

From: azadeh hashemi [mailto:xlbrlx [at] yahoo]
Sent: Wednesday, September 14, 2011 12:01 AM
To: ntop [at] listgateway <ntop [at] listgateway>
Subject: [Ntop] Network Flows

sorry for asking too much :(
I use nprobe to0 collect netflows, my ntop show the traffic summary and ralated graphs but there is no netflow, in the web interface in network flows it shows 0, and I can't see them, while this is what I do want to see.
I check my machine with netstat and tcpdump, they were work peroperly.
where is the problem?

<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads