[Ntop] Ntop NetFlow Question

[Gary Gatten]

How'd anyone ever function without Google?

 

http://www.mail-archive.com/ntop@unipi.it/msg11605.html

 

 

 

________________________________

From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Gary Gatten
Sent: Thursday, February 12, 2009 3:49 PM
To: ntop at unipi.it
Subject: Re: [Ntop] Ntop NetFlow Question

 

I have seen this asked and I think answered a couple times, but since I
don't do sampling I wasn't paying much attention.  I'm sure if you
searched the list you'd see some answers from Luca and/or Burton.  I
searched the FAQ and man page and couldn't find anything.  Also checked
the "Preferences" and couldn't see anything there either.  MAYBE check
the globals-define.h; there's lots of cool stuff in there but you have
to recompile with changes :-(

 

Of course the easy answer is to NOT sample.  Unless you have a $HIT load
of traffic it will be OK, especially if you set the active/inactive
export timers to something reasonable.

 

BTW: What is "not accurate"?

 

 

 

________________________________

From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Kyle McLerren
Sent: Thursday, February 12, 2009 3:13 PM
To: ntop at unipi.it
Subject: [Ntop] Ntop NetFlow Question

 

Hi All,

Im sure this has been answered before, but I couldnt find an answer
anywhere. I use sampled netflow, and I simply wanted to know if theres
an option with the ntop netflow plugin to configure the sample rate?
Otherwise, my results arent acurate. Im sending 1 out of 100 from my
router.

thanks!

"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential. If
you are not the intended recipient, you are hereby notified that any
review, use, dissemination, disclosure or copying of this email and its
attachments, if any, is strictly prohibited. If you have received this
email in error, please immediately notify the sender by return email and
delete this email from your system." 






<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20090212/b7b63fb0/attachment-0001.html