[Ntop] community and cluster

[Gary Gatten]

This is all the "doc" I could find - but granted I didn't spend hours
looking either:

 

*  You can define a community adding an entry of type
community.<name>=<network list>. For instance
community.ntop.org=131.114.21.22/32 

*  You can define a host cluster adding an entry of type
cluster.<name>=<network list>. For instance
cluster.Home=192.168.0.0/16,172.0.0.0/8 

*  You can map a numeric vlan id to a name adding an entry of type
vlan.<vlan id>=<vlan name>. For instance vlan.10=Administration

 

I'm thinking Clusters is what you want, but there's a 16 cluster limit
per nTop instance, so if you have more than 16 ... "things" you want to
group,  you'll need more than one instance.  If this doesn't work, you
could use an instance per "group" and use filters to define the
interesting traffic for each group.

 

G

 

________________________________

From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Terri Kelley
Sent: Sunday, September 14, 2008 9:35 PM
To: ntop at unipi.it
Subject: Re: [Ntop] community and cluster

 

On Sep 9, 2008, at 7:02 PM, Terri Kelley wrote:





I have a netflow running from a gateway router but want to break down  
the info according to local subnets. Right now the info presented is  
for all of the IP space we own. Basically I would like to be able to  
see that and according to the groups of addresses allocated to the  
various public subnets throughout my network.  So my thought was  
perhaps to use either host cluster or communities. As I understand it,  
cluster is an aggregation of everything on a subnet. I cannot find a  
definition of what community is so if anyone can tell me the  
difference or what a community is it would be appreciated.

Terri
_______________________________________________
Ntop mailing list
Ntop at unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

 

Never saw a reply to this. Anyone?

 

Terri






<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20080915/0a3b75ee/attachment-0001.html