While I fear I may be beating a dead horse with this posting, it was too
much for me to resist.  Below is some constructive feedback.

I have been using the NTOP for nearly 4 years now and have "graduated" from
using an RPM with a released version to compiling my own NTOP install from
CVS sources.  I have watched it go from an advanced command line to the
mature project we have today.  What seems to be a recurring theme in all of
these years is the lack of a way to store more detailed information between
running instances of NTOP.

Many people will have differing needs in this area.  For instance, while
historical traffic about an individual host my be useful for one person,
another person (me for instance) will have a greater need for aggregate
traffic results for a T1 that links two buildings.  In my particular case,
data in perpetuity under the "Stats" tab would be fine.  I would be able to
tell the average bandwidth being used and what protocols and, to some
extent, what hosts were using it.

It would a great plus to be able to save that greater level of detail
between boots.  I do post this with some level of humility though.  I am
not a programmer and honestly can not really fathom what it takes to
implement this type of feature.

Keep up the great work everyone!

--

J. Eric Josephson
Director of Network and System Operations
978-720-2159
mailto:[EMAIL PROTECTED]



                                                                                       
                                                     
                      Josh Clarke                                                      
                                                     
                      <JoshC@mushroommu        To:       "'[EMAIL PROTECTED]'" 
<[EMAIL PROTECTED]>                                                  
                      sic.com.au>              cc:                                     
                                                     
                      Sent by:                 Subject:  RE: [Ntop] Any way not to 
lose the traffic stats                                   
                      ntop-admin@unipi.                                                
                                                     
                      it                                                               
                                                     
                                                                                       
                                                     
                                                                                       
                                                     
                      02/20/2003 08:54                                                 
                                                     
                      PM                                                               
                                                     
                      Please respond to                                                
                                                     
                      ntop                                                             
                                                     
                                                                                       
                                                     
                                                                                       
                                                     




So what happens to your beloved windows users with the new release?  is
there an rrd extraction tool such as rrddump?

-----Original Message-----
From: Burton M. Strauss III [mailto:[EMAIL PROTECTED]]
Sent: Friday, 21 February 2003 1:31 AM
To: [EMAIL PROTECTED]
Subject: RE: [Ntop] Any way not to lose the traffic stats


rrd is used to store SOME information across ntop sessions.  Packet counts,
byte counts, etc.

It does NOT store the transient information such as tcp sessions.

If you want to check stuff like bytes per minute, hour, day, then the
data's
in the rrd files and can be extracted with rrddump into xml format for
whatever additional processing you want.  Here's samples from my
rrd/interfaces/eth0/ethernetBytes.rrd, dumped via rrdtool dump.  You'll see
Total ethernet bytes at the interface every 5 m., followed by hourly
values:

<!-- Round Robin Database Dump -->
<rrd>
        <version> 0001 </version>
        <step> 300 </step> <!-- Seconds -->
        <lastupdate> 1045750988 </lastupdate> <!-- 2003-02-20 08:23:08
CST
-->

        <ds>
                <name> counter </name>
                <type> COUNTER </type>
                <minimal_heartbeat> 300 </minimal_heartbeat>
                <min> 0.0000000000e+00 </min>
                <max> 1.2500000000e+07 </max>

                <!-- PDP Status -->
                <last_ds> 36066265 </last_ds>
                <value> 2.2602864000e+05 </value>
                <unknown_sec> 0 </unknown_sec>
        </ds>

<!-- Round Robin Archives -->
        <rra>
                <cf> AVERAGE </cf>
                <pdp_per_row> 1 </pdp_per_row> <!-- 300 seconds -->
                <xff> 5.0000000000e-01 </xff>

                <cdp_prep>
                </cdp_prep>
                <database>
                        <!-- 2003-02-17 10:45:00 CST / 1045500300 -->
<row><v> 7.7725000000e+01 </v>
</row>
                        <!-- 2003-02-17 10:50:00 CST / 1045500600 -->
<row><v> 7.1699466667e+01 </v>
</row>
                        <!-- 2003-02-17 10:55:00 CST / 1045500900 -->
<row><v> 1.5430715556e+02 </v>
</row>
                        <!-- 2003-02-17 11:00:00 CST / 1045501200 -->
<row><v> 1.0892955556e+02 </v>
</row>
                        <!-- 2003-02-17 11:05:00 CST / 1045501500 -->
<row><v> 7.5383377778e+01 </v>
</row>
...
                </database>
        </rra>
        <rra>
                <cf> MIN </cf>
                <pdp_per_row> 12 </pdp_per_row> <!-- 3600 seconds -->
                <xff> 5.0000000000e-01 </xff>

                <cdp_prep>
                        <ds><value> 3.8247551111e+02 </value>
<unknown_datapoints> 0 </unknown_data
points></ds>
                </cdp_prep>
                <database>
                        <!-- 2002-11-25 13:00:00 CST / 1038250800 -->
<row><v> 3.2163666667e+02 </v>
</row>
                        <!-- 2002-11-25 14:00:00 CST / 1038254400 -->
<row><v> 2.6152893333e+02 </v>
</row>
                        <!-- 2002-11-25 15:00:00 CST / 1038258000 -->
<row><v> 2.7946488294e+02 </v>
</row>
                        <!-- 2002-11-25 16:00:00 CST / 1038261600 -->
<row><v> 2.6641633333e+02 </v>
</row>
...



-----Burton



-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Verweyen, Dirk
Sent: Thursday, February 20, 2003 8:10 AM
To: '[EMAIL PROTECTED]'
Subject: AW: [Ntop] Any way not to lose the traffic stats


Do ntop then stores the traffic over
sessions away?

We want to monitor betwheen our firewall
and the route of our provider to check
the invoice from him.

Dirk

PS: Sorry for my bad english...hobe you understand
what i want...

> -----Urspr�ngliche Nachricht-----
> Von: Burton M. Strauss III [mailto:[EMAIL PROTECTED]]
> Gesendet: Donnerstag, 20. Februar 2003 13:30
> An: [EMAIL PROTECTED]
> Betreff: RE: [Ntop] Any way not to lose the traffic stats
>
>
> The development version has dropped SQL support in favor of
> rrd.  Check into it.
>
> -----Burton
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
> Behalf Of Verweyen, Dirk
> Sent: Thursday, February 20, 2003 4:40 AM
> To: '[EMAIL PROTECTED]'
> Subject: [Ntop] Any way not to lose the traffic stats
>
>
> Hi,
>
> we have Ntop running but sometimes it crashed...
> on restart he lost the traffic stats.
> Is there a way not to lose the traffic stats.
>
> I�ve started it with
>
> ntop -u root -d -b localhost:4000 -s 1
>
> Is there another way?
>
> Greetings, Dirk
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop




_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to