i see. and then I can use -B and put tcpdump filters to save some memory. cool. thx wbwb
----- Original Message ---- > From: Gary Gatten <[email protected]> > To: "[email protected]" <[email protected]> > Sent: Sat, February 5, 2011 8:46:53 PM > Subject: Re: [Ntop] cumulating traffic with hosts on/off > > Yup. You can also tweak the timer for purging idle hosts, it's in >globals-define.h. You need to recompile after making changes to this file. > > ----- Original Message ----- > From: Joel Donahue [mailto:[email protected]] > Sent: Saturday, February 05, 2011 01:15 PM > To: [email protected] <[email protected]> > Subject: Re: [Ntop] cumulating traffic with hosts on/off > > I think this is what you need, from the man page: > > -c --sticky-hosts > > By default idle hosts are periodically purged from memory. Use this > flag to prevent idle hosts from being purged from memory. NOTE: if > idle hosts are kept in memory you can experience severe memory usage. > > On Sat, Feb 5, 2011 at 11:46 AM, Xaver Gerster <[email protected]> wrote: > > Hi, > > > > I'm trying to pin down top bandwidth users in my network using ntop - to >which > > I'm very new. > > > > The environment is such that hosts get switched 'on' and 'off' several > > times >a > > day. > > > > Now, my problem is, that (for me) the info in AllProtocols->Traffic seems to > > refer only to hosts which are currently in the network, i.e. 'on', and > > unfortunately restarts from scratch (i.e. zero Data Snd/Rcv) each time a >host > > previously switched 'off' goes online again. > > > > Is there any way to cumulate the traffic each host produces over a certain > > period of time even though it may disappear from the net every now and then > > during this time? > > > > Thanks for your help. > > wbwb > > > > > > > > _______________________________________________ > > Ntop mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > <font size="1"> > <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in > 0in >1.0pt 0in'> > </div> > "This email is intended to be reviewed by only the intended recipient > and may contain information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > </font> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
