As Gary says, video will kill you.
The trick, btw, using ntop like this is to make sure you put the sensor in the ‘right’ place. A sensor on your backbone will see only backbone traffic. A sensor on your desktop machine will only see traffic to/from the desktop, etc. For what you want to do, what you really need to do is put a TRUE hub between your firewall and router (or a tap) – that way you only see the external traffic. Note I said a true hub, as almost everything you buy today is a switch or switching hub and you won’t see the traffic. The last true hubs I got my hands on were 10Base-T. You can buy/build a tap (plans used to be @ Snort.org). With a tap, you need two Ethernet cards as one sees ‘send’ and the other sees ‘receive’. Put them together and have ntop merge the interfaces. -----Burton (Most of this is in the FAQ, BTW) _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Gatten Sent: Tuesday, June 12, 2007 11:13 AM To: [email protected] Subject: RE: [Ntop] Monitoring Bandwidth Assuming you have the switch/hub and ntop all configured correctly, simply look at the “All Protocol > Throughput” and sort by “Current” Click on the host links to see what each host is doing. Can also limit to sent or received, etc…. Watching video’s will EASILY consume 100% of your bandwidth. HQ video is 768Kb/s or greater – so four of those streams and you’re history. Gary _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay H. Sent: Tuesday, June 12, 2007 10:53 AM To: [email protected] Subject: [Ntop] Monitoring Bandwidth Hello, I am new to ntop and installed the windows version. My ISP claims that we are capping out on our bandwidth 3MB wireless connection with HTTP traffic. How can i see what is going on so I can confirm what they see? We have about 50 users behind our firewall. they have email open and check their own email's via yahoo, gmail, and hotmail, etc...some stream music, and others watch videos. Hope someone can help. Thanks, Jay =========================================================================== "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.9.0/852 - Release Date: 6/17/2007 8:23 AM No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.472 / Virus Database: 269.9.0/852 - Release Date: 6/17/2007 8:23 AM
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
