Re: [Ntop] Ntop 5.0.1 Top Talkers Netflow hosts "stuck"

[Dpto. Datos Television Costa Blanca]

Hi, Ntop is EOL and Im using ntopng without nprobe and it works perfectly. If you have any problem using ntopng, just ask here. Best Regards, El 04/04/2014 21:32, Daniel Dudkin escribió: Hi,   With NtopNG relying on paywall’ed nprobe, I need to use the last stable version of ntop to get an overview of whats going on in my network. I mainly need it to identify bandwidth hogs and for the most part hang out in the “Top Talkers” area.   I used to have ntop setup on SPAN ports. Recently, I installed a Cisco 891 router and am exporting netflow from all my VLANs (I have about 5) with “ip flow ingress” and “ip flow egress” on each vlan.   Ntop reads this data, but I realized the top talkers list is completely wrong and I can’t explain its behavior. I’ve tried several renditions of ntop and even tried compiling it on the machine its running on (CentOS 32bit). It seems as though once a host reaches the top, it stays on the top talkers list and reports its top peak usage, as the current minute usage (if looking at top talkers by hour).   So for instance, my public IP host will shoot to the top of the list doing ~2Mbit /sec. Despite KNOWING that the throughput is different (viewing stats on the Cisco or generating even more traffic), as the toptalkers list populates with future data/minutes – the host will stay there and report ~2Mbit /sec.   I tried netflow v5, v9. Setting low timeouts, etc.   I REALLY need this to work as I don’t know of any other good open source solution for such a good birds eye view of the status of my live network. I managed a very limited pipe and need to be able to answer who is hogging my bandwidth.   Appreciate any help.   Daniel Dudkin IT Business/System Specialist // American Auto-Matrix One Technology Lane // Export, PA 15632 www.aamatrix.com • ddud...@aamatrix.com Ph #: 724-733-0381   Confidential: This electronic message and all contents contained may be privileged, confidential or otherwise protected from disclosure. The information is intended to be for the addressee only. If you are not the addressee, any disclosure, copy, distribution or use of the contents of this message is prohibited. If you have received this electronic message in error, please notify me immediately by return email and destroy the original message and all copies. _______________________________________________ Ntop mailing list Ntop@listgateway.unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop -- Daniel Baeza Centro de Observación de Red Dpto. Internet y Telefonía Television Costa Blanca S.L. Telf. 966190565 WEB: http://www.tvt.es Correo: da...@tvt-datos.es --AVISO LEGAL-- En cumplimiento de la Ley Orgánica 15/1999, de 13 de diciembre de protección de datos de carácter personal, se pone en conocimiento del destinatario del presente correo electrónico, que los datos incluidos en este mensaje, están dirigidos exclusivamente al citado destinatario cuyo nombre aparece en el encabezamiento, por lo que si usted no es la persona interesada rogamos nos comunique el error de envío y se abstenga de realizar copias del mensaje o de los datos contenidos en el mismo o remitirlo o entregarlo a otra persona, procediendo a borrarlo de inmediato. Asimismo le informamos que sus datos de correo han quedado incluidos en nuestra base de datos a fin de dirigirle, por este medio, comunicaciones comerciales, profesionales e informativas y que usted dispone de los derechos de acceso, rectificación, cancelación y especificación de los mismos, derechos que podrá hacer efectivos dirigiéndose a Televisión Costa Blanca, S.L., C/ San Policarpo 41 Bajo. C.P: 03181 Torrevieja (Alicante).

_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop