The -m technique works, but I'm having a bit of confusion with interfaces: I have two, eth0 for external and eth1 for internal. When I use ntop -M option, along with -m "x.x.x.x" for all the ip addresses of my school, what do I see when I view local/remote traffic on eth1? My internal subnet is 10.10.10.*. Currently, it seems as if viewing local-local traffic on eth1 only shows traffic between the 10.10.10.* networks. I hope local-remote shows the traffic from 10.10.10.* to the external world, beyond my school's network?
eth0 interface is also confusing...when I look at local-local page, I see various computers on my school's network listed; I don't see how they would be accessing my router's eth0 interface unless I contacted them first, which I haven't. The transfer is very small....between 5kB to a max of 50kB. Can broadcast and multicast and similar things account for thier presence? eth0 local-remote shows my own router, along with computers on the school's network, with data usages. My own router contacts the outside, but how do other computer on the school network have data going through my router to the external network? My end purpose is to measure the data transfer per each internal 10.10.10.* on the eth1 internal interface: 10.10.10.* -> other 10.10.10.* 10.10.10.* -> internal school network (outside of eth0 network) which I can define with ip addresses 10.10.10.* -> outside world internet (everything outside of eth0 that is not defined as internal school) Which of the various pages should I look at to see these three data usage stats? Thanks for your help. On 10/2/06, Gary Gatten <[EMAIL PROTECTED]> wrote:
Yes, but you'll need to know what the schools internal IP's are and make them "local" with the -m switch. The you can view the local-remote and remote-local traffic - where remote is outside the school and local is the school. If you can't find all their IP's you can simply use all the RFC 1918 address space with the -m. Won't be perfect, but in theory anything other than 1918 addresses will be "outside" - general public routable addresses. You could also apply a filter (BPF) so nTop ignore all "local to local" traffic and only captures everything else. HTH Gary >>> [EMAIL PROTECTED] 10/1/2006 2:30 AM >>> Hello all, I'm trying to use ntop for a specific purpose, and setting it up has been tough. I'm in college, where they apply a 5GB to all students per month of access outside of the school. Any access to a school network doesn't count towards the limit. Currently, I have a linux router with NAT that is then connected to an access point. This means that anyone who connects to my access point goes through my router and charges towards my 5GB limit if they access outside of school. My internal IP addresses are organized 10.10.10.* on interface eth0, and my external interface is eth1. This school has four subnets, in the fassion of x.x.*.* I'm letting friends use my wireless, but I also want to keep a check on how much they use, since I get charged if it goes over 5GB/month. Is it possible to filter ntop so I can view the bandwidth usage for all bandwidth that leaves from the internal network and goes outside of the school's network? So basically, I want to see each individual 10.10.10.* ip address's contact with ip addresses that are not x.x.*.* Incoming and outgoing transfer both count. Any help is appreciated, or pointers to info on similar situations Thanks, Jimmy _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop =========================================================================== "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
