Do you have multiple NIC's installed and/or IPv6? When I installed nTop it insisted on listening on the IPv6 stack and since I'm not running any it wasn't reporting any.
Make sure lipbcap, ntop, etc is bound to the device/interface/whatever you're trying to see traffic on. Run tcpdump or similar on same interface and make sure you're seeing at least SOME traffic between the hosts you expect to. Lastly, make sure your port monitoring config is setup for bidirectional traffic. With Cisco you can choose in/out/both, so if you're only seeing traffic in one direction you could be missing a bunch depending on your flows. Gary -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ron Gage Sent: Thursday, October 04, 2007 10:14 AM To: [email protected] Subject: Re: [Ntop] Problem: NTOP missing data - and lots of it Gary: Gary Gatten wrote: > Just to be clear - you're monitoring (2) T1's so MAX possible throughput > would be ~ 6Mb/s? Your machine and nTop / libpcap should not have any > issues at these rates. > > 3 Meg actually - 2 x 1.544 Megabit. It just helps make the point that this shouldn't be overloading NTOP though... > I'm not familiar with the "reports" you mention - is that new in 3.3 or > am I missing something? I typically use All Protocols > Throughput and > select the hosts and data flows therein. I usually sort by Local hosts, > received only, and current throughput. > > OK, reports, screens, webpages... The main output of NTOP. My main place to look is in All Protocols->Traffic - sorted by the "Data" field descending... > Anyway... I'll do some thinking and see if I can come up with any > useful ideas. > > Thank you - your efforts are greatly appreciated! Ron Gage _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop =========================================================================== "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
