RE: [Ntop] NTOP Stoping without a Reason

[Serge Maandag]

You could also have a look at NetraMet or you could do accounting by adding an ACCEPT rule for every ip address in your packet filter and enable it's accounting, like   -s 1.1.1.1 -j ACCEPT -s 1.1.1.2 -j ACCEPT -s 1.1.1.3 -j ACCEPT -s 0/0      -j DENY   That way you can secure the accounting and use ntop for real time stats, like tracking sessions.   Serge. -----Original Message----- From: Rafael Rodrigo - NSINET [mailto:[EMAIL PROTECTED]] Sent: maandag 24 juni 2002 22:51 To: [EMAIL PROTECTED] Subject: Re: [Ntop] NTOP Stoping without a Reason MRTG is good, but ntop is exactly that I need. I need to see traffic by host(how iptraf do) to, in end of month, know how machines use the network and know what things the machines are doing. Example:   192.168.0.1: Transmit: 120 Mb Receive: 100 Mb Active TCP sessions: 192.168.77.1:80 <--> 200.255.214.60:3201   192.168.0.2: Transmit: 200 Mb Receive: 100 Mb Active TCP sessions: 192.168.77.1:80 <--> 200.255.214.60:3201 ...   NTOP is better tool that I found.   This thing iptraf do, but it don't save statistics. Ntop save if it was stoped normaly (don't if it crashes).   But i'm using MRTG too. It�s very good to see the total Router Bandwidth usage.   Thanks, Rafael Rodrigo M. Rosa - NSI Brazilian Internet Provider ----- Original Message ----- From: Vlade To: [EMAIL PROTECTED] Sent: Monday, June 24, 2002 5:25 PM Subject: Re: [Ntop] NTOP Stoping without a Reason For pure traffic count mrtg is the best. it can be found at  http://people.ee.ethz.ch/~oetiker/webtools/mrtg/   It uses SNMP, run it againt your switch and you'll get total traffic stats for all your servers. ----- Original Message ----- From: Rafael Rodrigo - NSINET To: [EMAIL PROTECTED] Sent: Monday, June 24, 2002 2:33 PM Subject: [Ntop] NTOP Stoping without a Reason I have a Conectiva Linux 7.0 with the currente stable version of tcpdump and lipcap.I compiled ntop2.0.99 RC2 and use this to count the traffic of my Network. All traffic is only going for Internet. I don't have a samba/windows network or anything as it. My Internet Link is of 512Kbps, then the max network traffic is 512Kbps.   Well, the compile was fine, and NTOP run fine during 3 days. But now it stops without a reason. And I lost all traffic counted by NTOP. I am using the flag -S1 save all network traffic, but it don't work now. I am using the current stable version of gdbm database.   The only thing that I think that can justify it, is a Hacker attack to a machine monitored by NTOP. This attack cause a total traffic of 1.1 Gigabytes on my network, during about 15 hours. But NTOP stops 5 hours after I stop the Hacker.   Somebody can help-me ?? If somebody knows a better tool to count monthly traffic on a network by machines, please tell me. But I think that this is the better tool.   Sorry by the bad english.   Thanks, Rafael Rodrigo M. Rosa - NSI Brazilian Internet Provider