RE: [Ntop] NTOP Stoping without a Reason

[Chris Nicola]

Burton is probably going to ask you to post some more details about what happened when it stopped.  And I can’t say I can help you either, but I will tell you that S1 will only keep information if NTOP is shut down normally.  If it crashes the data doesn’t get written to the database and it is all lost.   On a side note, Burton or Luca, it might be a good idea to have NTOP write to the database once every hour or some other interval so that if a crash occurs data is not necessarily lost.   Oh and one more thing Rafael, the data that is stored using the S1 flag does not include the overall traffic stats.  It will only keep stats for specific hosts, so when you click on a host after a reset there is data there about the host from before.  If I am not mistaken your traffic stats will always be wiped clean after a reset.   Chris   -----Original Message----- From: Rafael Rodrigo - NSINET [mailto:[EMAIL PROTECTED]] Sent: June 24, 2002 11:34 AM To: [EMAIL PROTECTED] Subject: [Ntop] NTOP Stoping without a Reason   I have a Conectiva Linux 7.0 with the currente stable version of tcpdump and lipcap.I compiled ntop2.0.99 RC2 and use this to count the traffic of my Network. All traffic is only going for Internet. I don't have a samba/windows network or anything as it. My Internet Link is of 512Kbps, then the max network traffic is 512Kbps.   Well, the compile was fine, and NTOP run fine during 3 days. But now it stops without a reason. And I lost all traffic counted by NTOP. I am using the flag -S1 save all network traffic, but it don't work now. I am using the current stable version of gdbm database.   The only thing that I think that can justify it, is a Hacker attack to a machine monitored by NTOP. This attack cause a total traffic of 1.1 Gigabytes on my network, during about 15 hours. But NTOP stops 5 hours after I stop the Hacker.   Somebody can help-me ?? If somebody knows a better tool to count monthly traffic on a network by machines, please tell me. But I think that this is the better tool.   Sorry by the bad english.   Thanks, Rafael Rodrigo M. Rosa - NSI Brazilian Internet Provider