Hey Greg - same issue again huh? The graphs can definitely be frustrating - they seem to have various and sometime numerous issues.
Just for kicks, how about wiping the data files/directories and restarting? Maybe something is corrupted? If you want the existing data you can always rename it instead of wiping it. If I remember you have quite a complex config. Are you certain netflow is configured correctly everywhere - capturing the right traffic in the directions you want on the interfaces you want? Have you tried "Host Clusters"? Might give you some of what you want - generic "network wide" type stats - convenient for grouping and stuff. G -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Redder,Greg Sent: Tuesday, May 06, 2008 8:51 AM To: [EMAIL PROTECTED] Subject: [Ntop] Network Load graphs Hello, I'm running ntop3.2 compiled from code on an FC6 box. I have several ntop processes running one one box and listening for flows on separate ports. This is to provide separate information for "subnets" under our larger Class B network range. For example, we are interested in seeing stats specific to the network for our Veterinary School as compared to the stats for our Education school...each of which resides on separate address spaces in our Class B network but "reside" off the same physical router. These processes have their "local-subnets" defined as the network range corresponding to the various colleges. I also have a process which defines a local-subnet as our entire Class B as I'm curious to get a picture of all traffic going in/out of the router. The odd thing is that the network load graph (Summary -> Network Load) for the entire ClassB is *less* than that for each of the colleges. This doesn't make sense to me. You'd think that the various subnets under our Class B would add up to the total for the Class B!? So, for example, our Veterinary School's network load graph shows an average of 16.2 Mbits, but the total for our entire Class B off that same router shows 16.0Mbits. Given these are different processes, each analyzing flow data from the same router, they should be seeing the same thing, yet they are coming up with conflicting reports. I'm not sure why this is, and was wondering if anyone had any ideas or has seen similar results? Thank you --Greg Redder ======================================================================== ======= Greg Redder Academic Computing & Networking Services Colorado State University, ACNS Phone:(970)491-7222 FAX: (970)491-1958 601 S. Howes, Room 625 E-mail: [EMAIL PROTECTED] Fort Collins, CO 80523 PGP Fprint:CD62EAE6227D96FC7C232B16DFE3B5D9B2F64352 ======================================================================== ======= _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font> _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
