|
Are you subnetting this into /30's?
-----Burton
We use nTop to monitor a class C subnet of our broadband
customers. The server nTop runs atop of is a Gentoo linux (2.6 kernel)
machine positioned as a router for the subnet. For traffic data we're
using nTop's RRD databases, but we've noticed that about 1/4th the customers on
the subnet aren't being assigned RRD databases. Information is available
on the nTop server webpage for these customers, but these IPs don't have the
view historical data icon listed on the page, nor do they have the file copy of
the database/directory on the back-end. I tried deleting the RRD root
directory and letting it rebuild it, but the same IPs are missing.
We're only monitoring one class C, and it's set to only record local IPs.
The system has been running for over a month, and we know for a fact these
customers are passing traffic. I've compiled a list of customers who seem
to be missing, which is listed below. Because it seemed to be the same IPs
always, even after a rebuilds, and deleting the RRD folder I figure there must
be a pattern. Using a little bit of bc magic I converted the last digit of
all of the IPs to binary. They're listed below. This may or may not
be related to the problem or not, but all of the bad IPs seem to end in
11. I looked through the code in rrdplugin.c but didn't see anything that
stuck out to me. If anyone else has any ideas it'd be really
helpful.
Here's my init line:
ntop -- -d -L -c -g -m
'12.111.122.1/24' -o -u ntop -L -M --disable-instantsessionpurge
--http-server 3000 --interface br0,eth0
It's a from source build
directly from the 3.2 tarball on sf, not from gentoo's portage.
1011
10011
11011
11111
100011
100111
101111
111111
1000011
1010011
1010111
1011011
1100111
1101011
1110011
1110111
1111011
10000011
10001011
10001111
10010011
10010111
10101011
11001011
11010011
11010111
11011011
11011111
11100111
11101011
11101111
|
11
19
27
31
35
39
47
63
67
83
87
91
103
107
115
119
123
131
139
143
147
151
171
203
211
215
219
223
231
235
239
|
Thank
You,
Cody Baker
[EMAIL PROTECTED]
http://www.wilkshire.net
|
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
