[Ntop] NTOP bandwidth alarm

[Gary Gatten]

There's nothing out of the box for this. There are several ways to go about this. If however you're using ipfw or pf, I think both are capable of tracking flow stats so imho you'd be better off scripting your thresholds and policing functions using the fw tools. Else, perhaps try wget to pull stats from ntop as needed.

________________________________

From: ntop-bounces at listgateway.unipi.it 
To: ntop at listgateway.unipi.it 
Sent: Fri Dec 04 23:41:10 2009
Subject: [Ntop] NTOP bandwidth alarm 


Hi guys,
 
    I am using ntop 3.3.10 to monitor our office network, it listens on one mirror port, it works well, thanks for the ntop developers.
 
    I can see who are the top bandwidth users in our network by browsing ntop GUI; now I want to achieve the below task:
    ntop can automatically trigger an alarm by some condition, such as one IP's bandwidth is above one threshold value, then my linux firewall can block or limit this IP according to this alarm.
 
    Could you help to provide your intruction, experience or comments about my probelm?
 
Thanks in advance!
 
Kingz






<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listgateway.unipi.it/pipermail/ntop/attachments/20091205/8465df29/attachment.htm>