[Ntop] interrupt results

Barry Fawthrop barry at isscp.com
Wed Sep 10 14:15:59 CEST 2008


Greetings All

I'm new to ntop.

Is there more information anywhere to help understand

I have printed and read M. Tamon's guide (which is good)

I was pleased to see that our results appear similar.

One that surprises me is the Network Load
Actual	        41.0 Kbit/s	 39.2 Pkt/s
Last Minute	41.0 Kbit/s	 39.2 Pkt/s
Last 5 Minutes	33.8 Kbit/s	 19.7 Pkt/s
Peak     	 2.9 Mbit/s	378.1 Pkt/s
Average	        18.7 Kbit/s	  4.7 Pkt/s

This on a 1Gb card, 1 Gb switch, and 7Mb internet connection ?

Two other unexpected results
Packet Size:
Shortest	      42 bytes
Average Size	     452 bytes
Longest	           1,514 bytes
Size <= 64 bytes	     7.6%      178,682
64 < Size <= 128 bytes	    57.3%    1,344,164
128 < Size <= 256 bytes	     1.5%       34,816
256 < Size <= 512 bytes	     1.4%       33,974
512 < Size <= 1024 bytes     3.9%       90,418
1024 < Size <= 1518 bytes   28.3%      664,374
Size > 1518 bytes	     0.0%            0


WHAT Can I set to move this more towards 256 - 512 bytes ?


Traffic TTL:
Average TTL	57
TTL <= 32	      0.0%       1,137
32 < TTL <= 64	     85.3%   2,004,926
64 < TTL <= 96	      0.0%         107
96 < TTL <= 128	     12.2%     286,716
128 < TTL <= 160      0.0%           0
160 < TTL <= 192      0.0%           0
192 < TTL <= 224      0.0%           0
224 < TTL <= 256      0.6%      13,565


My Biggest Question is on the Network Load Statistics Graphs
What is or causes the Yellow Anomalia ?


Thank to you
Barry


More information about the Ntop mailing list