Welcome to nTop!

Based on the description of your setup - I'm assuming you're only interested in 
seeing traffic to/from the desktop you have nTop running on?  If so, you can 
try to enable "stick-hosts" - read the man page for that.  Careful though, this 
setting will disable the idle host purge process completely, so if you visit 
many different sites you'll eventually exhaust memory and crash.

Another option would be to increase the thresholds used to to detect "idle" 
hosts and how often the idle-purge process is executed.  This requires tweaking 
some stuff in "globals-define.h" and recompiling.

Generally speaking, yes - "stuff" ages out and goes away, especially host level 
info.  Also, much of the data you see in the GUI is NOT persistent across 
reboots / restarts; it's in memory only.  If memory goes, data goes.  You can 
get around this to some extent in several ways: rrd files, etc.  man pages, 
FAQ, google is your friend!

HTH

G




________________________________
From: [email protected] 
[mailto:[email protected]] On Behalf Of Bradley Pham
Sent: Friday, March 19, 2010 2:41 PM
To: [email protected]
Subject: [Ntop] Ntop losing site data

I'm an Ntop n00b. Here is my setup. I have a desktop computer with about 512 MB 
RAM booted off of a Knoppix DVD running Ntop. It's capturing a lot of great 
information but I'm trying to track down which websites are taking up the most 
bandwith.

So I go to All Protocols/Traffic and then I select Remote Only but the 
information I want to see there is gone. There is some website taking up 300 MB 
in the morning because I can see it still listed on the All Protocols/Traffic - 
Local. Then when I click on the local host it just shows 300 MB transferred 
over HTTP but not which site it was.

I also recall specifically that a website was listed and then subsequently fell 
off the list. So it seems to me like the data is rolling over. So my question 
is, how can I increase the amount of data being kept for these sites and is it 
safe to do with a 512 MB box?

Thanks in advance!

________________________________
The New Busy is not the old busy. Search, chat and e-mail from your inbox. Get 
started.<http://www.windowslive.com/campaign/thenewbusy?ocid=PID27925::T:WLMTAGL:ON:WL:en-US:WM_HMP:032010_3>





<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 
1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to