I think you need to ignore the AS stuff and look more at host and domain info. I'll TRY to go back through your string and make sure I didn't miss anything, but I'm thinking the AS level stuff isn't as useful as other views unless you're an ISP or other type of transit as opposed to a typical end "node" / stub.
G ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Hammett Sent: Monday, September 15, 2008 10:25 AM To: [email protected] Subject: Re: [Ntop] Sent vs. Received Netflow on a Mikrotik router. It is listening on the interface that goes to my upstream. ---------- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com From: Mukom TAMON <mailto:[EMAIL PROTECTED]> Sent: Monday, September 15, 2008 5:08 AM To: [email protected] Subject: Re: [Ntop] Sent vs. Received How are you listening? mirror port, hub or netflow? M.A. TAMON B.Eng, CCNP, CCNA _________________________ "A man owns nothing, not land or money, only his character, the loyalty & courage in his heart" - Commander Chakotay - StarTrek Voyager My BLOGs: [ICT Business Integration] - http://ibiztech.wordpress.com [Leadership Lessons from Movies] - http://thbs.wordpress.com [In Search of Excellence & Perfection] - http://perfexcellence.wordpress.com [Technical How Tos & Stuff-at-a-Glance] - http://techowto.wordpress.com On Sat, Sep 13, 2008 at 3:07 PM, Mike Hammett <[EMAIL PROTECTED]> wrote: Does anyone have any ideas? I've restarted a few times trying to figure it out, but I'm now up to 21.7 GB sent from my AS and 432 MB received is 89%. It's real difficult to figure out where my traffic is going when it doesn't show the whole picture. ---------- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com From: Mike Hammett <mailto:[EMAIL PROTECTED]> Sent: Tuesday, September 09, 2008 8:03 AM To: [email protected] Subject: [Ntop] Sent vs. Received I just setup NTOP. Why is it that all of my "local" hosts only show data sent and all remote hosts only show data received? My AS stats page shows that the AS my hosts are on has sent 1.4 GB since last night.. 100%. It does show some received... probably hosts that are on the same AS, but aren't local. Remote ASes only show data received. I am listening to the router interface facing my upstream. I have attempted to attach a screen shot of the AS stats. ---------- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com ________________________________ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop ________________________________ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
