Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NTop: Users

Ports greater than 1024

 

 

NTop users RSS feed   Index | Next | Previous | View Threaded


josephhaig at gmail

Nov 27, 2009, 3:27 PM

Post #1 of 7 (668 views)
Permalink
Ports greater than 1024

I have just discovered ntop as I was looking for something for
detailed monitoring of my network. Looking at the web interface under
"IP->Local->Ports Used" it appears that it is only monitoring ports
lower than 1024. However, I have a web proxy on port 8080, access to
which I would also like to see, as well as any other higher ports that
may be used for file sharing software. Is this possible?

Thanks,

oe
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


Ggatten at waddell

Nov 27, 2009, 3:53 PM

Post #2 of 7 (639 views)
Permalink
Re: Ports greater than 1024 [In reply to]

Good question. There is a directive in globals-defines.h to address this, but you'd have to recompile. If you add it on the command line args it may work. Actually, for 8080 it may already be included as "http"

----- Original Message -----
From: ntop-bounces [at] listgateway <ntop-bounces [at] listgateway>
To: ntop [at] listgateway <ntop [at] listgateway>
Sent: Fri Nov 27 17:27:34 2009
Subject: [Ntop] Ports greater than 1024

I have just discovered ntop as I was looking for something for
detailed monitoring of my network. Looking at the web interface under
"IP->Local->Ports Used" it appears that it is only monitoring ports
lower than 1024. However, I have a web proxy on port 8080, access to
which I would also like to see, as well as any other higher ports that
may be used for file sharing software. Is this possible?

Thanks,

oe
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop





<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>


Ggatten at waddell

Nov 27, 2009, 3:53 PM

Post #3 of 7 (633 views)
Permalink
Re: Ports greater than 1024 [In reply to]

Good question. There is a directive in globals-defines.h to address this, but you'd have to recompile. If you add it on the command line args it may work. Actually, for 8080 it may already be included as "http"

----- Original Message -----
From: ntop-bounces [at] listgateway <ntop-bounces [at] listgateway>
To: ntop [at] listgateway <ntop [at] listgateway>
Sent: Fri Nov 27 17:27:34 2009
Subject: [Ntop] Ports greater than 1024

I have just discovered ntop as I was looking for something for
detailed monitoring of my network. Looking at the web interface under
"IP->Local->Ports Used" it appears that it is only monitoring ports
lower than 1024. However, I have a web proxy on port 8080, access to
which I would also like to see, as well as any other higher ports that
may be used for file sharing software. Is this possible?

Thanks,

oe
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop





<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>


josephhaig at gmail

Nov 28, 2009, 3:50 PM

Post #4 of 7 (622 views)
Permalink
Re: Ports greater than 1024 [In reply to]

Thanks, I've compiled it with that changed now and I'll see how it
works. As a suggestion to the developers, would it make sense to make
this a configurable option?

2009/11/27 Gary Gatten <Ggatten [at] waddell>:
> Good question. There is a directive in globals-defines.h to address this,
> but you'd have to recompile. If you add it on the command line args it may
> work. Actually, for 8080 it may already be included as "http"
>
> ----- Original Message -----
> From: ntop-bounces [at] listgateway <ntop-bounces [at] listgateway>
> To: ntop [at] listgateway <ntop [at] listgateway>
> Sent: Fri Nov 27 17:27:34 2009
> Subject: [Ntop] Ports greater than 1024
>
> I have just discovered ntop as I was looking for something for
> detailed monitoring of my network.  Looking at the web interface under
> "IP->Local->Ports Used" it appears that it is only monitoring ports
> lower than 1024.  However, I have a web proxy on port 8080, access to
> which I would also like to see, as well as any other higher ports that
> may be used for file sharing software.  Is this possible?
>
> Thanks,
>
> oe
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> "This email is intended to be reviewed by only the intended recipient and
> may contain information that is privileged and/or confidential. If you are
> not the intended recipient, you are hereby notified that any review, use,
> dissemination, disclosure or copying of this email and its attachments, if
> any, is strictly prohibited. If you have received this email in error,
> please immediately notify the sender by return email and delete this email
> from your system."
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


os10rules at gmail

Nov 28, 2009, 4:21 PM

Post #5 of 7 (623 views)
Permalink
Re: Ports greater than 1024 [In reply to]

Did you find a source of info on how to do that or did you have to reinvent the wheel? I need to do the same.

There's an interesting post just in the past few days on the WISPA forum about inaccuracies in the NTOP accounting. You might be interested in that. The subject line is Re: [MT] Bandwidth transferred

Greg

On Nov 28, 2009, at 6:50 PM, Joseph Haig wrote:

> Thanks, I've compiled it with that changed now and I'll see how it
> works. As a suggestion to the developers, would it make sense to make
> this a configurable option?
>
> 2009/11/27 Gary Gatten <Ggatten [at] waddell>:
>> Good question. There is a directive in globals-defines.h to address this,
>> but you'd have to recompile. If you add it on the command line args it may
>> work. Actually, for 8080 it may already be included as "http"
>>
>> ----- Original Message -----
>> From: ntop-bounces [at] listgateway <ntop-bounces [at] listgateway>
>> To: ntop [at] listgateway <ntop [at] listgateway>
>> Sent: Fri Nov 27 17:27:34 2009
>> Subject: [Ntop] Ports greater than 1024
>>
>> I have just discovered ntop as I was looking for something for
>> detailed monitoring of my network. Looking at the web interface under
>> "IP->Local->Ports Used" it appears that it is only monitoring ports
>> lower than 1024. However, I have a web proxy on port 8080, access to
>> which I would also like to see, as well as any other higher ports that
>> may be used for file sharing software. Is this possible?
>>
>> Thanks,
>>
>> oe
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>> "This email is intended to be reviewed by only the intended recipient and
>> may contain information that is privileged and/or confidential. If you are
>> not the intended recipient, you are hereby notified that any review, use,
>> dissemination, disclosure or copying of this email and its attachments, if
>> any, is strictly prohibited. If you have received this email in error,
>> please immediately notify the sender by return email and delete this email
>> from your system."
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop


josephhaig at gmail

Nov 29, 2009, 1:27 AM

Post #6 of 7 (626 views)
Permalink
Re: Ports greater than 1024 [In reply to]

All I did was change MAX_ASSIGNED_IP_PORTS to 65536 from 1024 in
globals-defines.h, as suggested by Gary.

I cannot find the WISPA forums - the closes I have found are some
mailing lists but there are no posts with the subject "Bandwidth
transferred" that I can find. Do you have a direct link?

Thanks,

Joe

2009/11/29 <os10rules [at] gmail>:
> Did you find a source of info on how to do that or did you have to reinvent
> the wheel? I need to do the same.
> There's an interesting post just in the past few days on the
> about inaccuracies in the NTOP accounting. You might be interested in that.
> The subject line is Re: [MT] Bandwidth transferred
> Greg
> On Nov 28, 2009, at 6:50 PM, Joseph Haig wrote:
>
> Thanks, I've compiled it with that changed now and I'll see how it
> works.  As a suggestion to the developers, would it make sense to make
> this a configurable option?
>
> 2009/11/27 Gary Gatten <Ggatten [at] waddell>:
>
> Good question. There is a directive in globals-defines.h to address this,
>
> but you'd have to recompile. If you add it on the command line args it may
>
> work. Actually, for 8080 it may already be included as "http"
>
> ----- Original Message -----
>
> From: ntop-bounces [at] listgateway <ntop-bounces [at] listgateway>
>
> To: ntop [at] listgateway <ntop [at] listgateway>
>
> Sent: Fri Nov 27 17:27:34 2009
>
> Subject: [Ntop] Ports greater than 1024
>
> I have just discovered ntop as I was looking for something for
>
> detailed monitoring of my network.  Looking at the web interface under
>
> "IP->Local->Ports Used" it appears that it is only monitoring ports
>
> lower than 1024.  However, I have a web proxy on port 8080, access to
>
> which I would also like to see, as well as any other higher ports that
>
> may be used for file sharing software.  Is this possible?
>
> Thanks,
>
> oe
>
> _______________________________________________
>
> Ntop mailing list
>
> Ntop [at] listgateway
>
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> "This email is intended to be reviewed by only the intended recipient and
>
> may contain information that is privileged and/or confidential. If you are
>
> not the intended recipient, you are hereby notified that any review, use,
>
> dissemination, disclosure or copying of this email and its attachments, if
>
> any, is strictly prohibited. If you have received this email in error,
>
> please immediately notify the sender by return email and delete this email
>
> from your system."
>
> _______________________________________________
>
> Ntop mailing list
>
> Ntop [at] listgateway
>
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


os10rules at gmail

Nov 29, 2009, 3:47 AM

Post #7 of 7 (620 views)
Permalink
Re: Ports greater than 1024 [In reply to]

I know there is a web site which hosts the emails from that forum but I'm never able to find it when I need it. I'll post it here. Nobody had any answers or a fix, just some anecdotal info:

<QUOTE FROM WISPA FORUM>

Your observations regarding accuracy of NTOP may be similar to mine.

You have to be careful that the data you are looking at matches the duration a specific client has been associated. I've found if a customer power cycles the equipment, NTOP sees the connection as a new one. Cumulative stats per IP may not be fairly stated. It helps to reset the data first when you want to do a few day analysis. If there is a different way, I'm listening.

Mike


At 06:26 PM 11/27/2009, you wrote:
> I believe the overview pages, but suspect the granular stats are bogus. It will rank each IP by usage and give a total GB used by protocol. IP/Summary/Traffic The ranking also shows top users by percent of total BW used.
>
> Mike
>
> At 06:03 PM 11/27/2009, you wrote:
>> Is it accurate? I've had a hard time getting it to be accurate in other worlds (IP - ASN).
>>
>>
>> -----
>> Mike Hammett
>>
>>
>>
>>
>> Sent: Friday, November 27, 2009 5:52 PM
>> To: Mikrotik Users
>> Subject: Re: [MT] Bandwidth transferred
>>
>> NTOP
>>
>> On Fri, Nov 27, 2009 at 4:14 PM, Mike
>> Does anyone have an idea as to how to get MT to log how much a certain IP has transferred? I have a customer that is looking to colo a server and pay per gigabyte transferred. Can't do PPPoE\RADIUS with a server. I don't like that a reboot would knock out a queue stat.
>>

<END QUOTE>

On Nov 29, 2009, at 4:27 AM, Joseph Haig wrote:

> All I did was change MAX_ASSIGNED_IP_PORTS to 65536 from 1024 in
> globals-defines.h, as suggested by Gary.
>
> I cannot find the WISPA forums - the closes I have found are some
> mailing lists but there are no posts with the subject "Bandwidth
> transferred" that I can find. Do you have a direct link?
>
> Thanks,
>
> Joe
>
> 2009/11/29 <os10rules [at] gmail>:
>> Did you find a source of info on how to do that or did you have to reinvent
>> the wheel? I need to do the same.
>> There's an interesting post just in the past few days on the
>> about inaccuracies in the NTOP accounting. You might be interested in that.
>> The subject line is Re: [MT] Bandwidth transferred
>> Greg
>> On Nov 28, 2009, at 6:50 PM, Joseph Haig wrote:
>>
>> Thanks, I've compiled it with that changed now and I'll see how it
>> works. As a suggestion to the developers, would it make sense to make
>> this a configurable option?
>>
>> 2009/11/27 Gary Gatten <Ggatten [at] waddell>:
>>
>> Good question. There is a directive in globals-defines.h to address this,
>>
>> but you'd have to recompile. If you add it on the command line args it may
>>
>> work. Actually, for 8080 it may already be included as "http"
>>
>> ----- Original Message -----
>>
>> From: ntop-bounces [at] listgateway <ntop-bounces [at] listgateway>
>>
>> To: ntop [at] listgateway <ntop [at] listgateway>
>>
>> Sent: Fri Nov 27 17:27:34 2009
>>
>> Subject: [Ntop] Ports greater than 1024
>>
>> I have just discovered ntop as I was looking for something for
>>
>> detailed monitoring of my network. Looking at the web interface under
>>
>> "IP->Local->Ports Used" it appears that it is only monitoring ports
>>
>> lower than 1024. However, I have a web proxy on port 8080, access to
>>
>> which I would also like to see, as well as any other higher ports that
>>
>> may be used for file sharing software. Is this possible?
>>
>> Thanks,
>>
>> oe
>>
>> _______________________________________________
>>
>> Ntop mailing list
>>
>> Ntop [at] listgateway
>>
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>> "This email is intended to be reviewed by only the intended recipient and
>>
>> may contain information that is privileged and/or confidential. If you are
>>
>> not the intended recipient, you are hereby notified that any review, use,
>>
>> dissemination, disclosure or copying of this email and its attachments, if
>>
>> any, is strictly prohibited. If you have received this email in error,
>>
>> please immediately notify the sender by return email and delete this email
>>
>> from your system."
>>
>> _______________________________________________
>>
>> Ntop mailing list
>>
>> Ntop [at] listgateway
>>
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> Ntop [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop

NTop users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.