Hi Daniel, Thanks for your answer.
I should said in my previous email that I want L7 packet inspection, so for first, I will do a port mirror on the switch.
I dont really know if is best to have a ntop probe, or directly read all the packets, or what.
Im not very familiar with sflow, so I dont know if with it I can do L7 DPI. Also, I dont know if the C3750G we use for backbone switching can do sflow.
Thanks again. --Daniel El 08/01/2015 a las 11:22, Daniel Gomez escribió:
Hi Daniel, >From my experience ntop is not really CPU intensive, although under linux seems to be multithreading but single-cpu. I am running it on a DELL Server with "Intel(R) Xeon(R) CPU E5410 @ 2.33GHz" and Ubuntu 12.10 x86_64. I sample a ~4 Gbps connection with "sflow sample 1024". That means 1 packet every 1024. Higher rates mean more Inbound Traffic on the interface of your server, so do not use a 100Mbps or less. If you are going to need the historical data, think about the HDD space. Regards, Daniel Von: "Dpto. Datos Television Costa Blanca" <[email protected]> An: [email protected] Datum: 08.01.2015 10:03 Betreff: [Ntop] System requirements Gesendet von: [email protected] Hi All, Long time I'm not writting to the list, and long time I dont have a server running ntopng. Im having right now arround 600Mbps peak traffic, and I need to run ntopng. What server requirements or configuration do I need to run it? Taking into account that I will be having more traffic in very near future. Thanks in advance! -- Daniel _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
