When host usage is 100% what is the process(s) that are causing the usage? Is it ntopng or something else?
From: [email protected] [mailto:[email protected]] On Behalf Of Dpto. Datos Television Costa Blanca Sent: Wednesday, November 04, 2015 9:51 AM To: [email protected] Subject: Re: [Ntop] Hardware requirements Hi Jospeh, host resource usage is 100% almost 100% of the time. I tried with and without PF_RING with same result. Capture NICs are Intel Corporation 82541GI Gigabit Ethernet Controller El 04/11/2015 a las 16:46, Joseph Jackson escribió: Whats the host resource usage when you are seeing the packet loss? When you select the interface from ntop dashboard does it show it using PF_Ring? I have a box that captures on 2 10gig interfaces at around 30K pps (just a subset of traffic) but it's a pretty beefy box. What is your capture nic? Joseph From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Dpto. Datos Television Costa Blanca Sent: Wednesday, November 04, 2015 9:43 AM To: [email protected]<mailto:[email protected]> Subject: Re: [Ntop] Hardware requirements Hello?! Can anyone confirm my messages are showing correctly in the list? Thanks in advance! El 30/10/2015 a las 10:59, Dpto. Datos Television Costa Blanca escribió: Hi all! Im bumping this. We want to buy the Pro version, but firts we want to test the community one. At this moment, we have a 4x Intel(R) Xeon(TM) CPU 2.80GHz with 2Gb RAM and 35Gb SCSI RAID1 in Ubuntu 12.04 We've installed nbox to control ntopng. With this configuration, we have more than 50% of packet drop and a few issues. While I have this: 8,436 Hosts<http://185.29.68.24:3010/lua/hosts_stats.lua> 254 Aggregations<http://185.29.68.24:3010/lua/aggregated_hosts_stats.lua> 14,101 Flows<http://185.29.68.24:3010/lua/flows_stats.lua> If I go to Hosts -> Networks only 2 of my local networks appear while I have configured 8 local networks. The 2 ones who appear in the Networks, are always the same (the 2 first configured in the -m option) and if I go to Hosts -> Hosts, only 40 hosts appears in the list. In Flows, only 1825 flows appears. I'm doing something wrong? All that info was only monitoring 1 interface. If I setup to monitor the 2Gb interfaces, packetdrop grows and interface get really really slow. What kind of hardware do I need to monitor both interfaces? Or, maybe, what kind of hardware configuration? P.E. Do i need 3 servers, 2 for nprobes and 1 for ntopng? We are planning to move to a 10G in the next year, so please, take that also into consideration. We know with the Pro version we can do some kind of traffic shaping, take that into consideration too. Without all that info, we cant buy the ntop licenses. Thanks in advance and Best Regards, El 27/10/2015 a las 18:06, Dpto. Datos Television Costa Blanca escribió: Hi All, What hardware or kind of configuration do you recommend for monitoring 2 Gb interfaces (port mirror mode)? Thanks in advance!!! --Daniel _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
