[Ntop] Filtering not working properly

Hi there I still cannot get filtering to work completely on my ntopng installation. I really would like to exclude traffic from a subnet and also to ignore broadcasts and mutlicasts if possible. My filter statement is as follows --packet-filter="ip and not (ip multicast || ether

Re: [Ntop] Excluding hosts or a subnet from being monitored

Thank you Simone. This worked great. Is there a way to exclude a range IPs or multiple IPs? Regards Brett On January 5, 2017 7:09:29 PM GMT+02:00, brett.sti...@cargocarriers.co.zw wrote: >Thank you Simone. > >I will try that tomorrow morning. > >Much appreciated. > > > >On January 5, 2017

Re: [Ntop] Excluding hosts or a subnet from being monitored

This doesn't work for me, I'm using the following parameters to exclude 10.0.0.39 which is my ntopng server IP: --packet-filter "ip and not proto ipv6 and not ether host ff:ff:ff:ff:ff:ff and not net (224.0.0.0/8 or 239.0.0.0/8) and not host 10.0.0.39" Gerhard, On Jan 5, 2017, at 12:09 PM,

Re: [Ntop] Excluding hosts or a subnet from being monitored

Thank you Simone. I will try that tomorrow morning. Much appreciated. On January 5, 2017 6:40:25 PM GMT+02:00, Simone Mainardi wrote: >Brett, the filter is not complete. If you want to exclude 10.0.50.246 >set: > >--packet-filter="not host 10.0.50.246" > >If you look at

Re: [Ntop] Excluding hosts or a subnet from being monitored

Brett, the filter is not complete. If you want to exclude 10.0.50.246 set: --packet-filter="not host 10.0.50.246" If you look at the ntopng output you will see if the filter is parsed correctly. On Thu, Jan 5, 2017 at 4:05 PM, Brett Stiell (CCIH) < brett.sti...@cargocarriers.co.zw> wrote:

Re: [Ntop] Excluding hosts or a subnet from being monitored

Hi there. Thanks for getting back to me This is the contents of my ntopng.start file:- -G=/var/run/ntopng.pid --daemon= --local-networks="10.0.50.0/25,10.0.50.128/26,10.0.50.193/30" --packet-filter 10.0.50.246 -m "10.0.50.0/25,10.0.50.128/26,10.0.50.193/30" --track-local-hosts

Re: [Ntop] 10Gbit Line Rate performance on Dell R520

Thanks Alfredo, The installed NTop application is currently in a VM however the numademo numbers were generated via a live CD (an easy way to test performance without flattening the host). The R520 has 12 RAM slots, we’re filled the 6 (in triple-channel configuration) associated with the

Re: [Ntop] 10Gbit Line Rate performance on Dell R520

Hi Tim how many RAM slots did you fill in practice? “All” or “all channels”? Please run n2membenchmark, included in the n2disk package, which is our benchmarking tool and let us see some output. Are you running a VM on this R520 or a native OS? Alfredo > On 5 Jan 2017, at 14:37, Tim Raphael

[Ntop] 10Gbit Line Rate performance on Dell R520

Hi All, We have a Dell R520 with a single processor (and one empty slot) and all the associated RAM slots filled. numademo shows we can do 14,000MB/s which is apparently a little short of the 16,000MB/s required for line rate 10Gbit PF_RING NTop analysis. Is there anything else we can do with

[Ntop] Excluding hosts or a subnet from being monitored

Hi. Is there any way to exclude a subnet or a range of hosts from being monitored and appearing on the dashboard etc. Our servers are in a specific IP range and I am not interested in receiving their usage data. I tried -B and -packet-filter and "not" but they don't seem to work.