Hi Olivier,
thanks for using ntop.
Oliver Mannion wrote:
>
> Hi all,
>
> I have ntop 1.3.2 on redhat6.2 linux and have noticed the following.
> In the IP traffic section, the remote->local (R->L)
> shows different totals than the local->remote (L->R).
That's fine. Suppose host X is local, and host Y is remote. Suppose that
X copies a large file to Y using FTP. In this case (L->R) >> (R->L).
> I notice that the list of hosts in the R->L table changes
> with time, hosts that haven't been accessed recently are
> not shown, although their subtotals are stored and reappear
> if I access such a host in the present. This seems
Everything in ntop is dynamic (this was a design decision).
> somewhat confusing, because the totals at the bottom depend
> entirely on which hosts have been accessed recently, but not on
> how many bytes have been sent recently by those same hosts (whose
> sub-totals are incremented since ntop started). Is ntop meant
> to work in this way? Can one simply have all the remote hosts
> ever accessed since ntop started in the table? I understand
You can specify the top limit of hosts shows using the -e option
(default is 384).
> after the threshold of 2048 hosts/connections is exceeded garbage
> colletion starts, but I am only talking about 10-20 remote hosts
Not exactly: the garbage collection runs once in a while either when
there's no room left and the hash table has to be extended or when there
are hosts that have not transmitted/received for a while and need to be
purged.
> in my tables. The local->remote tables shows an accurate record of the
> running total of data received/sent, which is what I would expect for
> the remote hosts table. Comments please?
> Regards
> Oliver Mannion
I hope my answer is satisfactory. If not please let me know.
Chers, Luca
--
Luca Deri Finsiel S.p.A.
Via Matteucci 34/B 56124 Pisa, Italy.
Ph. +39/050/968.639 Fax. +39/050/968.626
Email: [EMAIL PROTECTED] WWW: http://www.tlcpi.finsiel.it/~deri/
ICQ: 68183632
Software is about stuff, about getting hands dirty - Jim Coplien
