Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NTop: Users

Show specific traffic between 2 specific hosts and ports

 

 

NTop users RSS feed   Index | Next | Previous | View Threaded


flavio at piramide

Oct 31, 2009, 6:06 AM

Post #1 of 4 (539 views)
Permalink
Show specific traffic between 2 specific hosts and ports

Hello list,

I¹m quite new to ntop, and I¹m asking if there is a way to have a
³customized² view to see a graph for the amount of data transferred on a
daily basis between 2 specific hosts and ports.

I mean: I¹d like to know how much traffic every single day is being done
between host A and host B on an ssh tunnel. With iptables, I set up 2 rules
to count the bytes I¹m interested in, but now I¹d step up to some graphical
representation. Any way to do this?

Thanks in advance,
F.


bsilva at sonic

Oct 31, 2009, 8:43 AM

Post #2 of 4 (512 views)
Permalink
Re: Show specific traffic between 2 specific hosts and ports [In reply to]

Well, there might be a better way to do it, but you can use the -B flag to
pass filter rules (same rules as tcpdump), to ntop to select only those
host/ports.

I've done similar things with ntop and it works well. But again, I'm hardly
an ntop expert so there might be a better answer.


Brad

On Sat, Oct 31, 2009 at 06:06, Boniforti Flavio <flavio [at] piramide> wrote:

> Hello list,
>
> I’m quite new to ntop, and I’m asking if there is a way to have a
> “customized” view to see a graph for the amount of data transferred on a
> daily basis between 2 specific hosts and ports.
>
> I mean: I’d like to know how much traffic *every single day* is being done
> between host A and host B on an ssh tunnel. With iptables, I set up 2 rules
> to count the bytes I’m interested in, but now I’d step up to some graphical
> representation. Any way to do this?
>
> Thanks in advance,
> F.
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>


bsilva at sonic

Oct 31, 2009, 8:43 AM

Post #3 of 4 (508 views)
Permalink
Re: Show specific traffic between 2 specific hosts and ports [In reply to]

Well, there might be a better way to do it, but you can use the -B flag to
pass filter rules (same rules as tcpdump), to ntop to select only those
host/ports.

I've done similar things with ntop and it works well. But again, I'm hardly
an ntop expert so there might be a better answer.


Brad

On Sat, Oct 31, 2009 at 06:06, Boniforti Flavio <flavio [at] piramide> wrote:

> Hello list,
>
> I’m quite new to ntop, and I’m asking if there is a way to have a
> “customized” view to see a graph for the amount of data transferred on a
> daily basis between 2 specific hosts and ports.
>
> I mean: I’d like to know how much traffic *every single day* is being done
> between host A and host B on an ssh tunnel. With iptables, I set up 2 rules
> to count the bytes I’m interested in, but now I’d step up to some graphical
> representation. Any way to do this?
>
> Thanks in advance,
> F.
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>


flavio at piramide

Nov 1, 2009, 11:17 PM

Post #4 of 4 (505 views)
Permalink
Re: Show specific traffic between 2 specific hosts and ports [In reply to]

Hello Brad and thanks for your feedback.

Do you mean I should be starting ntop by changing parameters with "-B"
flag in the init.d file? Or is there another way?
And, BTW: could you be giving me an example of what *you* did with your
ntop setup?

Kind regards,
F.


________________________________

From: ntop-bounces [at] listgateway
[mailto:ntop-bounces [at] listgateway] On Behalf Of Brad Silva
Sent: Saturday, October 31, 2009 4:43 PM
To: ntop [at] unipi
Cc: ntop [at] listgateway
Subject: Re: [Ntop] Show specific traffic between 2 specific
hosts and ports


Well, there might be a better way to do it, but you can use the
-B flag to pass filter rules (same rules as tcpdump), to ntop to select
only those host/ports.

I've done similar things with ntop and it works well. But
again, I'm hardly an ntop expert so there might be a better answer.


Brad


On Sat, Oct 31, 2009 at 06:06, Boniforti Flavio
<flavio [at] piramide> wrote:


Hello list,

I'm quite new to ntop, and I'm asking if there is a way
to have a "customized" view to see a graph for the amount of data
transferred on a daily basis between 2 specific hosts and ports.

I mean: I'd like to know how much traffic every single
day is being done between host A and host B on an ssh tunnel. With
iptables, I set up 2 rules to count the bytes I'm interested in, but now
I'd step up to some graphical representation. Any way to do this?

Thanks in advance,
F.

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop

NTop users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.