Ntop won't quite do this by itself. It does summarize some data, but not all. From my experience it's more of a "realtime" monitor and doesn't do trending that well. What you ask should be "easy" but not that I know of. It trends interfaces and protocols similar to you describe, but not hosts. But, try this and see if it will work ok:
1.) Logically place ntop where it will only see the traffic you want, ie: internet traffic. Or use filters. 2.) Try sticky hosts. Maybe use "local hosts only" with this setting, else you'll exhaust memory in your system. 3.) RRD files. Tweak the settings until they suite your needs. You need to run "Arbitrary Graphs" to see this data - default reports won't have it. 4.) If that doesn't work, you may have to dump data to SQL. Later versions support mysql, but you must configure and make it this way, which means you'll probably need to compile it yourself vs. a package. Crafty use of "wget" may also be of benefit. The "man" page describes all the args pretty well. The html FAQ in the web gui helps too. ----- Original Message ----- From: [email protected] <[email protected]> To: [email protected] <[email protected]> Sent: Sun Oct 04 00:38:51 2009 Subject: [Ntop] How to monitor internet usage for users over time Hi, Is there an easy way to show only internet in/out usage for hosts? That's my main need and Ntop is showing so much that I can't tease out the info I need. Simply, for each person connected to the network, what is their daily, weekly, monthly internet usage? Also, if someone connected for 30 minutes during the day then disconnected - what was their usage? My initial experience is that I couldn't find this info w/Ntop. It seemed if a user was not connected anymore then I could not find any statistics on them in Ntop, their stats seemed lost. Also again I need internet only usage stats for all users connected at anytime the netflow is running. I am using DD-WRT flashed router I have it set for Netflow every 5 minutes to an Ntop client. The router is connected to a modem to the internet. Is there a way to do this? Is Ntop capable of this? Are there filters of some kind that could help. Are there documents that explain how? I'm willing to read, please link. Thanks _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
