It's in the back traffic on this list. Buckets are per host.
Idle hosts (defined as no traffic for a period of time after the connection is torn down, etc.) are dropped. If persistent storage is enabled, the values are saved off first. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Evren Yurtesen Sent: Saturday, October 12, 2002 9:10 AM To: [EMAIL PROTECTED] Subject: RE: [Ntop] time period of reports Are these buckets are for per host data or system wide? Now the question arises, isnt there a maximum limit for the memory usage for ntop? If the data lifetime was from the start of ntop the process until now then the process would only grow unlimitedly. I also noticed that some hosts which had statistics about have disappeared after a time and ntop says it is unable to generate the page about that host. OK lets say that the data over 24 hours period is not saved. But then, today I noticed that some data about 1 host was missing, it just seemed like the data has been reset at 6am today and there was only data for last 12 hours. Ntop says at the bottom of the page that it was running for 13 days. Report created on Sat Oct 12 17:08:35 2002 [13 day(s) 10:22:45] So is ntop purging data or not? Evren On Sat, 12 Oct 2002, Burton M. Strauss III wrote: > ntop stores the values in 60 buckets for the prior minutes and 24 buckets > for the prior hours, plus lifetime values. > > If persistent data isn't used, it should be obvious how it works. Values > for periods not seen are zero. Lifetime is from the start of ntop til now. > > If persistent data IS used, ntop reloads the data when it first sees the > host and continues processing from there. This can lead to odd results if > you restart ntop frequently... As a simple example, say you run ntop from > 8a to 1p, stop it and start again at 6p. At 7 pm, the hourly buckets > actually hold: > > 6p > 1p > 12n > 11a > 10a > 9a > 8a > > But will be reported as 6p, 5p, 4p, 3p, 2p, etc. > > Complexity is left to the beholder. > > -----Burton > > > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Evren > Yurtesen > Sent: Thursday, October 10, 2002 5:50 PM > To: [EMAIL PROTECTED] > Subject: [Ntop] time period of reports > > > Hi, > What is the time period of the "Info about host XYZ" pages? and others? > Is it the last 24 hours or since ntop started or is there a way the > determine the period somehow? or is it something about "First/Last Seen" > Evren > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
