[Ntop] Need help in analyzing ntop data

[Gary Gatten]

Network bandwidth is "always" rated in bits - not Bytes - so in answer
to your first question -  it's bits for throughput.  Now for Data Sent /
Rcvd - that will be bytes.

 

Percentage of traffic  is either  the sum of all traffic for a given
host compared to network traffic as a whole, or a specific protocol
compared to all traffic.  For example, host A total traffic sent and
rcvd is 100MB and total network traffic is 1GB, host A will be 10%.  If
you're looking at a specific host and looking at hourly buckets for the
last 24 hours, then the percents show there will help show that hosts
busy times.  If a host as 90% of his daily traffic at 3am - what's
happening at 3am?

 

Hope that helps?  Just play around with it a little a do some testing
monitoring traffic to/from your own workstation.  Maybe do some
downloads (of known size)  and see how it impacts the various graphs for
your host?

 

Gary

 

 

________________________________

From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
ankush grover
Sent: Thursday, February 07, 2008 3:08 AM
To: ntop at unipi.it
Subject: [Ntop] Need help in analyzing ntop data

 

Hi,

I want to do some analysis of NTOP data. Currently I have installed
NTOP on Centos 5.1  and I am able to see some network data being
graphed. But there is no documentation given whether NTOP is showing
Network Throughput in MBytes or MBits for ex  I am getting
Throughput   Min: 163.7k , Max: 3.0 M and Last 859.4k and there are
some options like anomalia, upper,lower and trend (30min).


Under All Protocols -> Traffic   I can see per hour data received and
data sent but I am not able to figure out how NTOP is currently the
percentage of this data


Time    Tot. Traffic Sent       %Traffic Sent   Tot. Traffic Rcvd
% Traffic Rcvd
10 AM   287.8 MBytes      0.3%                  32.9 MBytes
1.4 %


How NTOP is calculating %Traffic Sent /Rcvd?


Please let me know if you need any further inputs .



Regards

Ankush 






<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20080207/cc93f428/attachment.html