Well, I'm trying to see: 1.. What ASes I communicate with most 2.. What services are used most (seems to work okay) 3.. What clients are doing the most data I expected to see: 1.. The sent and received data for the respective section. What I am seeing: 1.. The only time I see anything under sent is under the AS report for my AS. 2.. The traffic IP summary is presumably correct. 3.. The AS report shows that my AS sent 100% of 30 some gigs, and it has 94% of the received at 764 megs. This can't accurately depict any sort of traffic. 4.. Internet domains similarly has an odd skew of the information.
---------- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com From: Gary Gatten Sent: Monday, September 15, 2008 6:41 PM To: [email protected] Subject: Re: [Ntop] Sent vs. Received Can you recap / summarize: 1.) What you're trying to monitor? (Seems obvious, just wanna make sure) 2.) What you expect to see? 3.) What you are seeing? I haven't had a chance to review the thread again - especially the attachments. I do remember thinking to myself "everything looks good to me", but that was after a very brief review of your posts. I could've missed something.. Gary -------------------------------------------------------------------------------- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Hammett Sent: Monday, September 15, 2008 6:20 PM To: [email protected] Subject: Re: [Ntop] Sent vs. Received I am an ISP, I just don't have any downstream ASes at this moment. If someone needs to look at my config, I can probably setup a port forward to the internal server. Lastly, I suppose if it takes a few bucks to get it fixed, I'll see what I can do. ---------- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com From: Gary Gatten Sent: Monday, September 15, 2008 11:16 AM To: [email protected] Subject: Re: [Ntop] Sent vs. Received I think you need to ignore the AS stuff and look more at host and domain info. I'll TRY to go back through your string and make sure I didn't miss anything, but I'm thinking the AS level stuff isn't as useful as other views unless you're an ISP or other type of transit as opposed to a typical end "node" / stub. G -------------------------------------------------------------------------------- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Hammett Sent: Monday, September 15, 2008 10:25 AM To: [email protected] Subject: Re: [Ntop] Sent vs. Received Netflow on a Mikrotik router. It is listening on the interface that goes to my upstream. ---------- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com From: Mukom TAMON Sent: Monday, September 15, 2008 5:08 AM To: [email protected] Subject: Re: [Ntop] Sent vs. Received How are you listening? mirror port, hub or netflow? M.A. TAMON B.Eng, CCNP, CCNA _________________________ "A man owns nothing, not land or money, only his character, the loyalty & courage in his heart" - Commander Chakotay - StarTrek Voyager My BLOGs: [ICT Business Integration] - http://ibiztech.wordpress.com [Leadership Lessons from Movies] - http://thbs.wordpress.com [In Search of Excellence & Perfection] - http://perfexcellence.wordpress.com [Technical How Tos & Stuff-at-a-Glance] - http://techowto.wordpress.com On Sat, Sep 13, 2008 at 3:07 PM, Mike Hammett <[EMAIL PROTECTED]> wrote: Does anyone have any ideas? I've restarted a few times trying to figure it out, but I'm now up to 21.7 GB sent from my AS and 432 MB received is 89%. It's real difficult to figure out where my traffic is going when it doesn't show the whole picture. ---------- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com From: Mike Hammett Sent: Tuesday, September 09, 2008 8:03 AM To: [email protected] Subject: [Ntop] Sent vs. Received I just setup NTOP. Why is it that all of my "local" hosts only show data sent and all remote hosts only show data received? My AS stats page shows that the AS my hosts are on has sent 1.4 GB since last night.. 100%. It does show some received. probably hosts that are on the same AS, but aren't local. Remote ASes only show data received. I am listening to the router interface facing my upstream. I have attempted to attach a screen shot of the AS stats. ---------- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com -------------------------------------------------------------------------------- _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop -------------------------------------------------------------------------------- _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." -------------------------------------------------------------------------------- _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." -------------------------------------------------------------------------------- _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
