WRT rrd, read docs/FAQ and the paper on this subject @ SourceForge. RRD are persistent storage.
Counts are accumulations since ntop 1st saw the host (or start of run for per-interface items). Stuff that are reported as rates always has an indication of such (bits/sec) either in the column tag or directly associated with the number. (Well, if there is one that ISN'T, it should be). ntop classifies send and received by host based on the two addresses in the packet. For all of this, send and receive are handled separately - so it's possible for a given packet to be accumulated 0, 1 or 2 times into a given ASN. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kanagaraj Krishna Sent: Thursday, February 16, 2006 10:08 PM To: [email protected] Subject: [Ntop] Re: NTOP data analysis hi Mark, I'm currently trying to setup ntop to study my organizations traffic pattern using Netflow export (cisco and juniper). I've already installed it, but have some doubts. As we know, under "Autonomous Systems Traffic Statistics" there readings for ASN, hosts, data send(byte) and data receive(byte). My questions are: - Are the values for data (send & receive), accumulated total over time (ntop uptime) OR an average value at that time of period? I've realised that over time the value can decrease for a particular ASN. - Does data send, means traffic towards a particular ASN and date receive vice versa? - Can the captured data be saved and refered later using the browser? Does the RRD database keeps traffic info after NTOP is shut? Thanks, Kanagaraj Krishna _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
