? You probably have NTOP on a switched network, and are missing some of the traffic. The way I get around this is to place a hub between the backbone/regular network, with NTOP listening there. Switched network --->Hub w/NTOP box ---> Backbone/server switches or I also do it this way Switched network --> Hub w/NTOP --> Router -->Remote Router ---> Hub w/NTOP --> Remote switched network I am sure that email will mangle my beautiful diagrams...oh well. You should be able to get the idea. You can also use port mirroring. I have these hubs placed like this for sniffing/analysis anyway (but this is a test lab, not a production environment) Nick Weaver Test Lead/IT Support KeyLabs(tm) BottomLine Quality Managment Building 7 System Test Lab Ph: 208-396-7386 Cell: 208-353-5443
________________________________ From: [EMAIL PROTECTED] on behalf of Tim Holmes Sent: Wed 10/13/2004 7:59 AM To: [EMAIL PROTECTED] Subject: [Ntop] Question (probably dumb) from a new user Good morning. I just started using NTOP to monitor my network this week, and so far its going well, but I have a question. According to my summary screen, NTop has been running for 1 day and 20 hours and change. So it is showing total packets processed at just over 207,000 I know that's a large number, but it doesn't seem like enough for what Ive been doing on the network. We have about 100 regular users who are logging in etc, as well as I did 2 ghost casts yesterday, (each one over 5 gigs). Does NTOP only sample every so often, or is my traffic really that low? Or am I totally messed up? Thanks TIM Tim?Holmes ? IT Manager Medina Christian Academy, Inc. A Higher Standard... ? Jeremiah 33:3 Jeremiah 29:11 Esther 4:14 _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
<<winmail.dat>>
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
