[Ntop] looking to run ntop once daily reading from pcap file

joe z securadd at hotmail.com
Thu Aug 25 21:11:16 CEST 2005


i have a gateway bridge running snort for ips, tethereal to dump all traffic 
to a pcap file which gets gz'd and stored hourly and mrtg to graph traffic 
pulling from snmp once a minute. what im looking to do is run ntop once 
daily to produce the detailed graphs in html pulling the data for the graphs 
from the pcap dump. i don't want to run ntop constant as a daemon because of 
performance issues. ntop will be run on a seperate machine, where the gz'd 
files are, after the previous 24 hrs worth of captures have been unzipped 
and merged into one file. i then want to run ntop as described, once daily, 
and take the graphs produced and post them on another web server. im going 
to take the graphs produced and embed them in html on another web server... 
i'll get this done one way or the other, hopefully with a simple copy, if 
not a cropped screen capture... something, that should be relatively simple. 
so, in a nutshell, i need to run ntop once a day reading from 24hrs worth of 
pcap in a file.

thanks in advance for any suggestions...

_________________________________________________________________
On the road to retirement? Check out MSN Life Events for advice on how to 
get there! http://lifeevents.msn.com/category.aspx?cid=Retirement



More information about the Ntop mailing list