[Ntop] Need help in analyzing ntop data
Ggatten at waddell.com
Thu Feb 7 17:37:30 CET 2008
Network bandwidth is "always" rated in bits - not Bytes - so in answer
to your first question - it's bits for throughput. Now for Data Sent /
Rcvd - that will be bytes.
Percentage of traffic is either the sum of all traffic for a given
host compared to network traffic as a whole, or a specific protocol
compared to all traffic. For example, host A total traffic sent and
rcvd is 100MB and total network traffic is 1GB, host A will be 10%. If
you're looking at a specific host and looking at hourly buckets for the
last 24 hours, then the percents show there will help show that hosts
busy times. If a host as 90% of his daily traffic at 3am - what's
happening at 3am?
Hope that helps? Just play around with it a little a do some testing
monitoring traffic to/from your own workstation. Maybe do some
downloads (of known size) and see how it impacts the various graphs for
From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Sent: Thursday, February 07, 2008 3:08 AM
To: ntop at unipi.it
Subject: [Ntop] Need help in analyzing ntop data
I want to do some analysis of NTOP data. Currently I have installed
NTOP on Centos 5.1 and I am able to see some network data being
graphed. But there is no documentation given whether NTOP is showing
Network Throughput in MBytes or MBits for ex I am getting
Throughput Min: 163.7k , Max: 3.0 M and Last 859.4k and there are
some options like anomalia, upper,lower and trend (30min).
Under All Protocols -> Traffic I can see per hour data received and
data sent but I am not able to figure out how NTOP is currently the
percentage of this data
Time Tot. Traffic Sent %Traffic Sent Tot. Traffic Rcvd
% Traffic Rcvd
10 AM 287.8 MBytes 0.3% 32.9 MBytes
How NTOP is calculating %Traffic Sent /Rcvd?
Please let me know if you need any further inputs .
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Ntop