Hi,
From Man page :
" -c | --sticky-hosts
Use this parameter to prevent idle hosts from being purged from memory.
By default idle hosts are periodically purged from memory. An idle
host is identified when no packets from or to that host have been
monitored for the period of time defined by the value of
PARM_HOST_PURGE_MINIMUM_IDLE in globals-defines.h.
If you use this option, all hosts - active and idle - are retained in
memory for the duration of the ntop run.
P2P users, port scans, popular web servers and other activity will
cause ntop to record data about a large number of hosts. On an active
network, this will consume a significant - and always growing - amount
of memory. It is strongly recommended that you use a filtering
expression to limit the hosts which are stored if you use --sticky-hosts.
The idle purge is a statistical one - a random selection of the
eligible hosts will be purged during each cycle. Thus it is possible
on a busy system for an idle host to remain in the ntop tables and
appear ’active’ for some considerable time after it is truly idle."
Cheers,
--
Alistair James
University of Oxford
"No trees were killed in the creation of this message. However, a
goodly number of electrons were terribly inconvenienced."
--
Nada Kolasinac wrote:
Hello,
I have my ntop working fine...except one thing.
I noticed that after some period of specific host inactivity host counters
are restarted.
(When I say "inactivity" I think that is host down for a few hours or
more..).
Traffic summary is OK - it shows statistics for all the traffic captured
since ntop is up,
but it is not sum of statistics for all the hosts on my small network.
What I need is cumulative view of activity by host for a few days or for a
week.
I tried to find explanation in docs but I obviously missed something.
How to configure ntop to have summary for hosts no meter of how much time
the host is down?
Thanks,
Nada
------------------------------------------------------------------------
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
