Thank you for the answer. Here is another question:
A and B in this case were video conferencing systems whose software applications say that they were sending an average of 384 kbps back and forth to each other for about 20 minutes.
Nevertheless the "A" sight which was the top sender during one minute of our observation was not the top sender in any of the minutes before or after that. In fact, the top sender during those other minutes was often much lower than 384 kbps. In fact, the top sender of the minute was often lower than 64 kbps and the video conferencing applications are fairly consistent abbout sending 64 kbps of audio, whatever the burst rate of the video may or may not be.
So, it seems that the video conferencing applications were either not sending data, or ntop was not looking for it for some reason. We had people in front of the video conferencing systems who did not report that the video or audio stopped at any point, so I think the video and audio data were being sent.
My question then is why doesn't ntop keep reporting the video conference IP addresses as top senders, or top receivers?
Does ntop report the top average over a minute?
Thanks, I hope this question(s) makes sense.
Is there are document that explains this ntop section in more detail?
-----Original Message-----
From: Burton Strauss <[EMAIL PROTECTED]>
To: [email protected]
Sent: Thu, 14 Apr 2005 22:03:33 -0500
Subject: RE: [Ntop] Definition of "throughput" in Top Hosts Sent and Top HostsReceived
Sent means sent, received means received - as in one-way...
The lists are independent. If the traffic flow was A->B you'll see 1.5MB sent from A and 1.5MB received by B, but you can't tell that from the report. It could just happen that the flows add to a similar value.
-----Burton
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Thursday, April 14, 2005 4:58 PM
To: [email protected]
Subject: [Ntop] Definition of "throughput" in Top Hosts Sent and Top HostsReceived
If I look at the Network Load Statistics Matrix under Network Load Statistics and see 1.5 Mbps for one IP address under the Top Hosts Sent Thpt and 1.5 Mbps under another IP address under Top Hosts Rcvd Thpt, in a given minute, does that mean that the first IP address sent data at 1.5 Mbps to the second IP address?
If so does that mean the data rate was 1.5 Mbps in one direction, and there is no information about what the receiving IP address may have been sending back to the Transmitting one?
Or, does the 1.5 Mbps mean all the traffic in both directions between those two IP addresses?
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
