[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntop-dev
Subject:    RE: [Ntop-dev] NTOP WEB page changes...
From:       "Burton Strauss" <Burton () ntopSupport ! com>
Date:       2005-02-16 13:53:12
Message-ID: 0MKyxe-1D1Pc83qLh-0004E7 () mrelay ! perfora ! net
[Download RAW message or body]

The easiest way to use ntop to graph things is to feed it back the standard
lines w/ different start/end.

On the page, view source and extract the line that's generating the graph,
then set the options, e.g.:

.../plugins/rrdPlugin?action=graphSummary&graphId=4&key=interfaces/eth1/&sta
rt=now-163h&end=now-159h 
 
^^^^^^^^     ^^^^^^^^


The individual files are still there in the directory:

$ ls /usr/share/ntop/rrd/interfaces/eth1
activeHostSendersNum.rrd  icmpBytes.rrd           IP_eDonkeyBytes.rrd
IP_MessengerBytes.rrd  multicastPkts.rrd  upTo128Pkts.rrd
broadcastPkts.rrd         IGMP.rrd                IP_FTPBytes.rrd
IP_NBios-IPBytes.rrd   tcpBytes.rrd       upTo1518Pkts.rrd
ethernetBytes.rrd         ipBytes.rrd             IP_HTTPBytes.rrd
IP_SNMPBytes.rrd       tooLongPkts.rrd    upTo256Pkts.rrd
ethernetPkts.rrd          IP_DHCP-BOOTPBytes.rrd  IP_KazaaBytes.rrd
IP_SSHBytes.rrd        udpBytes.rrd       upTo512Pkts.rrd
hosts                     IP_DNSBytes.rrd         IP_MailBytes.rrd
knownHostsNum.rrd      upTo1024Pkts.rrd

The routine that decides what to present is listResource()... Look for the
while((dp = readdir(directoryPointer)) != NULL) {} loop around line 365.


-----Burton



-----Original Message-----
From: ntop-dev-bounces@unipi.it [mailto:ntop-dev-bounces@unipi.it] On Behalf
Of Tamas Kovacshazy
Sent: Wednesday, February 16, 2005 1:53 AM
To: ntop-dev@Unipi.IT
Subject: [Ntop-dev] NTOP WEB page changes...


Hi,

I am running NTOP CVS (2005/02/08 currently) on Linux to analyze our
Internet traffic.

I have 2 problems:

1.

I have found the Summary/Traffic/Historical Data RRD plots quite valuable to
detect the changes in traffic types, etc.

Unfortunately, the latest CVS version changed the output format of
Summary/Traffic/Historical Data drastically by plotting all traffic types
into 6 RRD graphs without any numerical data.

For example, HTTP is the only visible traffic type on graph 6 because of its
large volume compared to the others. However, changes in DNS or any other
traffic types may show some bad things happening in the network, which
cannot be seen on the current plotting scheme.

It would be nice to support the new format, and also the old one with
detailed plots for all traffic types (traffic type specific changes can be
seen) with numerical data (nice for reports, etc.) also.

2.

I have found quite useful the IP/Local/Ports Used in earlier versions,
unfortunately, it does not work (No Data To Display (yet)) since I changed
to the 3.1 CVS version. The configuration has not been changed during the
updates.

This page was quite nice to identify clients with some malicious programs
installed.

Best regards,

khazy

PS: NTOP was quite unstable for me after changing to 3.1, but deleting
dnsCache.db solved the problem. It may help others having stability
problems.

____________________________________________________________________________
___
    Tamas Kovacshazy  E-mail: khazy@mit.bme.hu  WWW:
http://www.mit.bme.hu/~khazy
   		Budapest University of Technology and Economics
    Department of Measurement and Information Systems  WWW:
http://www.mit.bme.hu _______________________________________________
Ntop-dev mailing list
Ntop-dev@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

_______________________________________________
Ntop-dev mailing list
Ntop-dev@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
[prev in list] [next in list] [prev in thread] [next in thread]