Gary, basically bytesSent and bytesRcvd accumulated over a period of at 
least a week.  Also the ntop hostname, which for HTTP sites is often more 
useful than the nslookup information.  With the hostname I can consolidate 
traffic from sites that show up with different IPs.

I see where the RRD data is being stored.  I have read Burton Strauss' 
2003 paper but am not much further in figuring out how to get useful 
summary information out of the XML dump.  I think I need to look at the 
AVERAGE (300 seconds) section, convert bits/second into bytes and sum 
across the period I am interested in.  I assume the other AVERAGE seconds 
are 'rollups' of the data.
        thanks, Norbert

> What info are you wanting exactly? Seems between rrd (with proper detail 
selected), sticky hosts, and your dump code - that should cover 
everything.
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to