[Ntop] looking to run ntop once daily reading from pcap file
securadd at hotmail.com
Thu Aug 25 21:11:16 CEST 2005
i have a gateway bridge running snort for ips, tethereal to dump all traffic
to a pcap file which gets gz'd and stored hourly and mrtg to graph traffic
pulling from snmp once a minute. what im looking to do is run ntop once
daily to produce the detailed graphs in html pulling the data for the graphs
from the pcap dump. i don't want to run ntop constant as a daemon because of
performance issues. ntop will be run on a seperate machine, where the gz'd
files are, after the previous 24 hrs worth of captures have been unzipped
and merged into one file. i then want to run ntop as described, once daily,
and take the graphs produced and post them on another web server. im going
to take the graphs produced and embed them in html on another web server...
i'll get this done one way or the other, hopefully with a simple copy, if
not a cropped screen capture... something, that should be relatively simple.
so, in a nutshell, i need to run ntop once a day reading from 24hrs worth of
pcap in a file.
thanks in advance for any suggestions...
On the road to retirement? Check out MSN Life Events for advice on how to
get there! http://lifeevents.msn.com/category.aspx?cid=Retirement
More information about the Ntop