[Ntop] Sent vs. Received

[Gary Gatten]

Can you recap / summarize:

 

1.) What you're trying to monitor?  (Seems obvious, just wanna make
sure)

2.) What you expect to see?

3.) What you are seeing?

 

I haven't had a chance to review the thread again - especially the
attachments.  I do remember thinking to myself  "everything looks good
to me", but that was after a very brief review of your posts.  I
could've missed something....

 

Gary

 

 

________________________________

From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Mike Hammett
Sent: Monday, September 15, 2008 6:20 PM
To: ntop at unipi.it
Subject: Re: [Ntop] Sent vs. Received

 

I am an ISP, I just don't have any downstream ASes at this moment.

 

If someone needs to look at my config, I can probably setup a port
forward to the internal server.

 

Lastly, I suppose if it takes a few bucks to get it fixed, I'll see what
I can do.

 

 

----------
Mike Hammett
Intelligent Computing Solutions
http://www.ics-il.com

 

 

 

From: Gary Gatten <mailto:Ggatten at waddell.com>  

Sent: Monday, September 15, 2008 11:16 AM

To: ntop at unipi.it 

Subject: Re: [Ntop] Sent vs. Received

 

I think you need to ignore the AS stuff and look more at host and domain
info.  I'll TRY to go back through your string and make sure I didn't
miss anything, but I'm thinking the AS level stuff isn't as useful as
other views unless you're an ISP or other type of transit as opposed to
a typical end "node" / stub.

 

G

 

 

________________________________

From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Mike Hammett
Sent: Monday, September 15, 2008 10:25 AM
To: ntop at unipi.it
Subject: Re: [Ntop] Sent vs. Received

 

Netflow on a Mikrotik router.

 

It is listening on the interface that goes to my upstream.

 

 

----------
Mike Hammett
Intelligent Computing Solutions
http://www.ics-il.com

 

 

 

From: Mukom TAMON <mailto:mukom.tamon at gmail.com>  

Sent: Monday, September 15, 2008 5:08 AM

To: ntop at unipi.it 

Subject: Re: [Ntop] Sent vs. Received

 

How are you listening? mirror port, hub or netflow?
M.A. TAMON
B.Eng, CCNP, CCNA
_________________________
"A man owns nothing, not land or money, only his character, the loyalty
& courage in his heart" - Commander Chakotay - StarTrek Voyager
My BLOGs:
[ICT Business Integration] - http://ibiztech.wordpress.com
[Leadership Lessons from Movies] - http://thbs.wordpress.com
[In Search of Excellence & Perfection] -
http://perfexcellence.wordpress.com
[Technical How Tos & Stuff-at-a-Glance] - http://techowto.wordpress.com



On Sat, Sep 13, 2008 at 3:07 PM, Mike Hammett <ntopusers at ics-il.net>
wrote:

Does anyone have any ideas?

 

I've restarted a few times trying to figure it out, but I'm now up to
21.7 GB sent from my AS and 432 MB received is 89%.  It's real difficult
to figure out where my traffic is going when it doesn't show the whole
picture.

 

 

----------
Mike Hammett
Intelligent Computing Solutions
http://www.ics-il.com

 

 

 

From: Mike Hammett <mailto:ntopusers at ics-il.net>  

Sent: Tuesday, September 09, 2008 8:03 AM

To: ntop at unipi.it 

Subject: [Ntop] Sent vs. Received

 

I just setup NTOP.

 

Why is it that all of my "local" hosts only show data sent and all
remote hosts only show data received?

 

My AS stats page shows that the AS my hosts are on has sent 1.4 GB since
last night..  100%.  It does show some received...  probably hosts that
are on the same AS, but aren't local.  Remote ASes only show data
received.

 

I am listening to the router interface facing my upstream.

 

I have attempted to attach a screen shot of the AS stats.

 

 

----------
Mike Hammett
Intelligent Computing Solutions
http://www.ics-il.com

 

 

________________________________

_______________________________________________
Ntop mailing list
Ntop at unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop


_______________________________________________
Ntop mailing list
Ntop at unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

 

________________________________

_______________________________________________
Ntop mailing list
Ntop at unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential. If
you are not the intended recipient, you are hereby notified that any
review, use, dissemination, disclosure or copying of this email and its
attachments, if any, is strictly prohibited. If you have received this
email in error, please immediately notify the sender by return email and
delete this email from your system." 

________________________________

_______________________________________________
Ntop mailing list
Ntop at unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop






<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20080915/486ab5aa/attachment-0001.html