On Tue, 7 Oct 2003, Luis Rodrigues wrote: > Hello. > > I'm using ntop 2.2, and I've got a little problem. > > I'm running an mySQL database to account and keep the data in my network > (using mySQLServer.pl to interface between mySQL and ntop). > > As far I can understand, ntop keeps records of the TCP sessions in the > TCPsessions table, and that's the part I'm really interested to use. > > The problem is: I need to keep a record of all TCP sessions. After a > session is terminated ntop clears the data, but I need to get the > deleted data (client, server, start time, stop time, etc.) in a new > table created by me. > > How can i do this? Where in the ntop source is the database interface > code? > Hello, As far as I could read, the mysql-interface is not longer supported :-( The authors tell you to use the new builtin rrd-plugin instead, so I am actually playing around with it. I actually use the NetFlow-Plugin to export NetFlow data I collect with an basically NetFlow-Client written in Perl. This Client puts the data into the mysql-database. There can't you find the data as detailed as within the nmap-web-interface, but the most important things you want to know are in there. The NetFlow-Client Script was available on the web, but I had to do some modifications on it. This is actually just an experimental solution, but it works so far. Some things to do would be i.e. encrypt/tunnel the NetFlow data.
If there's any interest in this, I can send more details. regards Stephan Knabe PS: If anybody out there knows some good resources, except the nmap- and rrd/mrtg-pages, about doing network accounting/statistics using nmap and rrd, I would be glad to hear about those. _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
