burnsjake at yahoo
Jul 17, 2012, 8:52 AM
Post #1 of 1
(201 views)
Permalink
|
|
ntop not capturing traffic from all hosts.
|
|
I have ntop 4.1.0 (64 bit) compiled on my pFsense 2.0 (BSD based) firewall. All traffic on my LAN (interface em0) goes to the internet via two ISPs connected directly to the firewall (interfaces igb0 & igb1).
ntop currently runs as a service with the following command: /usr/local/bin/ntop -i em0 -u root -d -4 -M -x 8102 -X 8192
I have 4 GB RAM with only about 30% used while ntop runs.
When trying to get a view of network traffic, I do not see a complete list of hosts generating traffic that goes through the firewall. I thought about running with the -c flag, but that doesn't seem like it's going to do much good.
If I run another bandwidth monitor such as darkstat or bandwidthd, I see the hosts that ntop misses. But darkstat and bandwidthd don't offer the detail I like from ntop. Does anyone have a suggestion how I can get a more complete picture of LAN hosts and their traffic usage?
Thanks,
--Jake
|
