Perhaps a different product like MRTG would be helpful.

Cheers

Erik Jacobsen


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf
Of MrBiTs
Sent: Saturday, July 27, 2002 8:23 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: [Ntop-dev] NTOP AddOn


Hi, all

I'm using NTop to try to check how many bandwidth my customers are using.
I have an ad-server system, running on Apache, Linux Red Hat 7.2, and this
system are generating the following type of log line:


0^1027775742^c8fa65fa3d09dd30^200.200.200.200^www.mysite.com/eletronics^
msite/corrida150702,Corrida_ON_Net4.htm,Top^unix^mozilla^mozilla4^

Each field is separated by ^. The structure is:

x^tsrt^uid^host^site/page^account/campname,banner,position^OS^browser^browve
r

x is a flag
tsrt is the unix time stamp
uid is the unique user ide
host us the hostname
site/page is the site and page the campaign are running
account is the name of account
campname is the name of campaign
banner is the banner :)
position is the place of the banner
OS is the operational system
browser is the browser
browver is the browser's version

Is possible to write an add-on or plugin to NTOP, to read this log, and
compute how many bandwidth each ACCOUNT and Campaign is consuming ?

What's the best way to develop NTOP's plugins ?

Does somebody has something like this ?

Thanks a lot for all help.






--
         \\|||//
         (.) (.)
-----ooOO--( )--OOoo------
          MrBiTs
 [EMAIL PROTECTED]
  www.psychosoft.com.br
--------------------------
_______________________________________________
Ntop-dev mailing list
[EMAIL PROTECTED]
http://lists.ntop.org/mailman/listinfo/ntop-dev


--__--__--

Message: 2
Organization:  Centro di Servizi per la rete di Ateneo - Pisa - Italy
From: "Burton M. Strauss III" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
Subject: RE: [Ntop] ppp/adsl, GRE and visible hosts
Date: Fri, 26 Jul 2002 09:13:15 -0500
Reply-To: [EMAIL PROTECTED]

But, ntop reads the raw Ethernet frames, not the TCP/IP packets.

So if PPPoA is framed differently vs. PPPoE vs. Ethernet, then my comment
about changing the code in the area of the PPPoE fix is right...  I know
that with PPPoE, the "frame-mangling" (for want of a better term) is done by
the software in the users PC (or the firewall/router).  Simplified:

The     \
Internet ----CO=========ADSLmdm=====PC
        /

or

The     \
Internet ----CO=========ADSLmdm=====Router------PC
        /

Where ---- is regular Ethernet traffic and ==== are PPPoE frames

I understand that the ATM traffic is between the DSLAM and the ADSLmdm, but
that still doesn't say what the framing looks like for the end device.  The
RFC I quoted implies it's NOT just pure wire line Ethernet (padding so it
divides nicely into ATM cells, etc.).

It might look just like PPP in PPPoE, just need another frame-type constant
on the case statement.  Or it could have a totally different offset.

I don't know

We just need somebody w/ a PPPoA account to gdb and look at the frames, id
the constants and offsets and pop in the fix.  Hint hint

-----Burton

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Andrea Borgia
Sent: Friday, July 26, 2002 7:25 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [Ntop] ppp/adsl, GRE and visible hosts


Burton M. Strauss III said:


> Wait a sec - are you SURE about PPPoA???

Very. I personally filled in the order form and selected PPPoA because
ADSL raw transport is, afaik, ATM so it seemed kind of pointless to
wrap/unwrap ppp in Ethernet frames then ATM instead of just ATM. Besides,
the problems reported by many people about MTU being exceeded on the
pc<->modem link only happened to PPPoE users, so it was a good way to skip
that mess 8-)


> That's a very different protocol than PPPoE - at some levels...  PPP
> over ATM vs PPP over Ethernet and I don't think ntop understands the atm
> frame.

I guess it doesn't really need to, but I'm not sure: afaik, the Linux
pptp-driver simply opens a connection to the dsl modem over ethernet and
feeds this pipe to the normal ppp driver to use as "modem" tty. ATM
traffic only happens on the telco side of the modem, which then strips it
and passes it to the PC using GRE (this last bit is not entirely clear to
me, maybe I should try to block GRE on that link and see if it bombs ;-)

Andrea.

P.S.: Stefano, I added the CC because I don't know whether you're still
subscribed to the list, please contact me if you are.

--
M� muistan sen kirkkaan p�iv�n, sen kes�n ja sen valon h�iv�n
Hein� haisi, puut tuoksui, linnut lauloi vaan
Ja Lada ajaa kyl�n raitilla, Lada ajaa ja stereot soittaa



_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://lists.ntop.org/mailman/listinfo/ntop


--__--__--

Message: 3
Date: Sat, 27 Jul 2002 10:22:59 -0300
From: MrBiTs <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Organization: PsychoSoft Inc
Subject: [Ntop] NTOP AddOn
Reply-To: [EMAIL PROTECTED]

Hi, all

I'm using NTop to try to check how many bandwidth my customers are using.
I have an ad-server system, running on Apache, Linux Red Hat 7.2, and this
system are generating the following type of log line:


0^1027775742^c8fa65fa3d09dd30^200.200.200.200^www.mysite.com/eletronics^
msite/corrida150702,Corrida_ON_Net4.htm,Top^unix^mozilla^mozilla4^

Each field is separated by ^. The structure is:

x^tsrt^uid^host^site/page^account/campname,banner,position^OS^browser^browver

x is a flag
tsrt is the unix time stamp
uid is the unique user ide
host us the hostname
site/page is the site and page the campaign are running
account is the name of account
campname is the name of campaign
banner is the banner :)
position is the place of the banner
OS is the operational system
browser is the browser 
browver is the browser's version

Is possible to write an add-on or plugin to NTOP, to read this log, and
compute how many bandwidth each ACCOUNT and Campaign is consuming ?

What's the best way to develop NTOP's plugins ? 

Does somebody has something like this ?

Thanks a lot for all help.






-- 
         \\|||//
         (.) (.)
-----ooOO--( )--OOoo------
          MrBiTs
 [EMAIL PROTECTED]
  www.psychosoft.com.br
--------------------------


--__--__--

_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://lists.ntop.org/mailman/listinfo/ntop


End of Ntop Digest
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://lists.ntop.org/mailman/listinfo/ntop

Reply via email to