For general interest, our test box is a DELL GXI 733 desktop with 128meg
memory running Red Hat 8.0.  The software was download and installed from
source, not from RPM's.  Currently it is monitoring in test mode a 100meg
Ethernet connection to 1 of 2 Cisco 7206's that are the main hubs of our
WAN (Over 100 sites domestically).  We are the corporate office and
datacenter so a lot of traffic comes here to use systems and get Internet
access.  Telnet to the box is real slow but the web pages serve ok and
there are not packets queued.  Production will see a larger processor and a
LOT more memory.

ntop -u ntop -P /data/ntop -a /data/ntop -i eth0 -o -d -p
/home/ntop/ntop-protlist.txt -C --reuse-rrd-graphics

Our protocol list is: (we are working to define the Novel IP and SAP ports.
As we control our Internet access tightly being a large automotive
supplier, the P2P, Messenger traffic can't get out so we aren't too worried
about it, hench the big buckets for them)

The file ntop-protlist.txt is the following
FTP=ftp|ftp-data|
HTTP=http|www|https|3128|
DNS=name|domain|
Telnet=telnet|login|
Novell=524|427|
Notes=1352|
SAP=3200-3299|
msoftDS=445|
NBios-IP=netbios-ns|netbios-dgm|netbios-ssn|
Mail=pop-2|pop-3|pop3|kpop|smtp|imap|imap2|
DHCP-BOOTP=67-68|
SNMP=snmp|snmp-trap|
NNTP=nntp|
NFS=mount|pcnfs|bwnfs|nfsd|nfsd-status|
X11=6000-6010|
SSH=22|
P2P=1214|4661-4665|6346|6347|6348|6699|7730|0|
Messenger=1863|5000|5001|5190-5193|


Tim Cahoon
Federal-Mogul Southfield
IT Tech Services - WAN TEAM
248-354-9453
[EMAIL PROTECTED]




_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to